Openidc Mod Auth Openidc — known CVE vulnerabilities

Every CVE whose affected-product data names Openidc Mod Auth Openidc, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (15)

• CVE-2017-6413 — CVSS 8.6 (high): The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.6 for the Apache HTTP Server does…
• CVE-2017-6062 — CVSS 8.6 (high): The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.5 for the Apache HTTP Server does…
• CVE-2017-6059 — CVSS 7.5 (high): Mod_auth_openidc.c in the Ping Identity OpenID Connect authentication module for Apache (aka mod_auth_openidc) before 2.14 allows remote…
• CVE-2021-20718 — CVSS 7.5 (high): mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vectors.
• CVE-2023-28625 — CVSS 7.5 (high): mod_auth_openidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying…
• CVE-2024-24814 — CVSS 7.5 (high): mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server that implements the…
• CVE-2019-1010247 — CVSS 6.1 (medium): ZmartZone IAM mod_auth_openidc 2.3.10.1 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Redirecting the user to a…
• CVE-2019-14857 — CVSS 6.1 (medium): A flaw was found in mod_auth_openidc before version 2.4.0.1. An open redirect issue exists in URLs with trailing slashes similar to…
• CVE-2019-20479 — CVSS 6.1 (medium): A flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs with a slash and backslash at the…
• CVE-2021-32791 — CVSS 5.9 (medium): mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying…
• CVE-2021-32785 — CVSS 5.3 (medium): mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying…
• CVE-2022-23527 — CVSS 4.7 (medium): mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server. Versions prior to…
• CVE-2021-32786 — CVSS 4.7 (medium): mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying…
• CVE-2021-39191 — CVSS 4.7 (medium): mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying…
• CVE-2021-32792 — CVSS 3.1 (low): mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying…