Ipsilon
Vendor:
First CVE: Nov 17, 2015 · Active for 10 years
5
Total CVEs
More Total CVEs than 77% of tracked products
1.7
Avg CVEs / Year
Higher CVE frequency than 59% of tracked products
6.2
Avg CVSS
Higher Avg CVSS than 24% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Ipsilon over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 17, 2015
10 years ago
Most Recent CVE
Feb 17, 2020
2,349 days ago
CVE Severity & Scoring
Ipsilon5 CVEs
80%
20%
All CVEs352,294 CVEs
45%
40%
11%
MediumCritical
Attack Vector
Local0 (0.0%)
Network3 (60.0%)
Unknown2 (40.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low3 (60.0%)
High0 (0.0%)
Unknown2 (40.0%)
User Interaction
None1 (20.0%)
Unknown2 (40.0%)
Required2 (40.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None3 (60.0%)
Unknown2 (40.0%)
Top CVEs
Signals from CVEs in this product scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-8638CRITICAL A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log out active sessions of other users. Thi | Jul 12, 2017 | 9.1 | 29 | NO | NO |
CVE-2015-5216MEDIUM The Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly escape certain characters in a Python exception-message template, which makes it easier for remot | Feb 17, 2020 | 6.1 | 17 | NO | NO |
CVE-2015-5215MEDIUM The default configuration of the Jinja templating engine used in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not enable auto-escaping, which makes it easi | Feb 17, 2020 | 6.1 | 17 | NO | NO |
CVE-2015-5301MEDIUM providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which allows remote authent | Nov 17, 2015 | 5.5 | 16 | NO | NO |
CVE-2015-5217MEDIUM providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly check permissions to update the SAML2 Service Provider (SP) owner, wh | Nov 17, 2015 | 4.0 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (5 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (5 CVEs).
Media Mentions
Signals from CVEs in this product scope (5 CVEs).
Top CNAs Publishing CVEs For Ipsilon
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2.0.1 | 1 | 9.1 | 2.1% | 0 | 0 |
| 2.0.0 | 1 | 9.1 | 2.1% | 0 | 0 |
| 1.2.0 | 1 | 9.1 | 2.1% | 0 | 0 |
| 1.1.1 | 1 | 9.1 | 2.1% | 0 | 0 |
| 1.1.0 | 2 | 7.3 | 1.8% | 0 | 0 |
| 1.0.2 | 1 | 9.1 | 2.1% | 0 | 0 |
| 1.0.1 | 2 | 7.3 | 1.8% | 0 | 0 |
| 1.0.0 | 3 | 6.2 | 1.6% | 0 | 0 |
| 0.6.0 | 2 | 4.8 | 1.4% | 0 | 0 |
| 0.5.0 | 2 | 4.8 | 1.4% | 0 | 0 |
| 0.4.0 | 2 | 4.8 | 1.4% | 0 | 0 |
| 0.3.0 | 2 | 4.8 | 1.4% | 0 | 0 |
| 0.1.0 | 2 | 4.8 | 1.4% | 0 | 0 |