OneLogin vulnerabilities
3 published CVEs name OneLogin among the affected products.
- 3Published CVEs3 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-52925
In One Identity OneLogin Active Directory Connector before 6.1.5, encryption of the DirectoryToken was mishandled, aka ST-812.
OneLogin · Active Directory Connector
Medium5.0 - CVE-2017-11428
Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
OneLogin · Ruby-SAML
High7.7 - CVE-2017-11427
Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
OneLogin · PythonSAML
High7.7