Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Active Directory Federation Services
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-16794 1 Microsoft 2 Active Directory Federation Services, Windows Server 2016 2018-11-20 5.0 MEDIUM 8.6 HIGH
Microsoft ADFS 4.0 Windows Server 2016 and previous (Active Directory Federation Services) has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls.