Internet2 vulnerabilities

Products

• Grouper 4
• Opensaml 3
• Shibboleth-sp 3
• Xmltooling 2

Newest

• internet2 grouper In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or... CVE-2026-103470 9.3 CriticalSeptember 30, 2026
• internet2 grouper In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can... CVE-2025-59714 6.5 MediumSeptember 19, 2025
• internet2 grouper Internet2 Grouper before 5.6 allows authentication bypass when LDAP authentication is used in... CVE-2024-39848 9.1 CriticalJune 29, 2024
• internet2 grouper Cross-site scripting (XSS) vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3... CVE-2018-19794 6.1 MediumDecember 3, 2018
• internet2 opensaml Exposure of Sensitive Information to an Unauthorized Actor in OpenSAML CVE-2013-6440 Fix available 5.0 MediumFebruary 14, 2014
• internet2 identity provider, service provider +1 more Multiple cross-site scripting (XSS) vulnerabilities in the Identity Provider (IdP) 1.3.x before 1... CVE-2009-3300 Fix available 2.6 LowNovember 6, 2009
• internet2 opensaml, xmltooling, shibboleth-sp +2 more Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider... CVE-2009-3476 Fix available 9.3 HighSeptember 24, 2009
• internet2 shibboleth-sp Internet2 Shibboleth Service Provider software 1.3.x before 1.3.3 and 2.x before 2.2.1, when... CVE-2009-3475 Fix available 7.5 HighSeptember 24, 2009
• internet2 opensaml, xmltooling, shibboleth-sp +2 more OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth... CVE-2009-3474 Fix available 7.5 HighSeptember 24, 2009