- How many CVEs does OneLogin have?
- OneLogin has 12 published CVE records since 2017, including 6 in the last two years.
- How many OneLogin CVEs are in CISA KEV?
- None of OneLogin's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which OneLogin products have the most CVEs?
- The OneLogin products with the most published CVEs are Ruby-SAML, Active Directory Connector, onelogin saml sso, python-saml, PythonSAML.
- What are the most common weakness types in OneLogin CVEs?
- OneLogin's CVEs most often map to these CWE weakness types: CWE-347 (Improper Verification of Cryptographic Signature), CWE-287 (Improper Authentication), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-798 (Use of Hard-coded Credentials).
- Are there public exploits for OneLogin vulnerabilities?
- Yes — 6 of OneLogin's CVEs have a known public exploit.
- How many critical OneLogin vulnerabilities are there?
- OneLogin has 7 critical and 4 high-severity CVEs.
- What is the average severity of OneLogin CVEs?
- The average CVSS base score across OneLogin's scored CVEs is 8.6.