Active Directory Federation Services vulnerabilities

Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

A vulnerability in Active Directory Federation Services (AD FS) related to improper certificate validation allows an unauthorized attacker to perform spoofing over a network.

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

An out-of-bounds read vulnerability in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network.

An infinite loop in Active Directory Federation Services (AD FS) allows an unauthorized attacker to remotely cause a denial of service (DoS).

A stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

A stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

A stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to remotely cause a denial of service (DoS).

An infinite loop in Active Directory Federation Services (AD FS) allows an unauthorized attacker to cause a denial of service over the network.

Stack-based buffer overflow in Active Directory Federation Services (ADFS) allows an unauthorized attacker to perform a DoS attack over the network.

A stack-based buffer overflow vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to remotely execute code or cause a denial of service (DoS) by sending a specially crafted network request.

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

A cross-site-scripting (XSS) vulnerability in Active Directory Federation Services (ADFS) due to improper sanitization of user inputs. An unauthenticated attacker can send a crafted request to an affected ADFS server, and upon successful exploitation, perform XSS attacks and run scripts in the current user's security context.