Miniorange Oauth Single Sign On – SSO (Oauth Client) vulnerabilities

3 vulnerabilities

Known vulnerabilities in Miniorange Oauth Single Sign On – SSO (Oauth Client), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2022-34155miniorangeoauth_single_sign_on+2
EPSS score
0.96%
Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) plugin allows Authentication Bypass.This issue affects OAuth Single Sign On – SSO (OAuth Client): from n/a through 6.23.3.9.8CVE-2026-28008miniorangeoauth single sign on – sso (oauth client)+1
EPSS score
0.61%
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 versions.9.8CVE-2026-97274miniorangeoauth single sign on – sso (oauth client)+1
EPSS score
0.30%
Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client) <= 7.1.2 versions.