Internet2 Grouper vulnerabilities

3 vulnerabilities

Known vulnerabilities in Internet2 Grouper, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2018-19794internet2grouper
EPSS score
1.08%
Cross-site scripting (XSS) vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter.6.5CVE-2025-59714internet2grouper
EPSS score
0.27%
In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs.9.3CVE-2026-103470internet2grouper
EPSS score
0.26%
In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate privileges.