Login Request a demo
GR
Product
Grouper
by Internet2 · last CVE Sep 30, 2026
3
CVEs
0
On KEV
9.3
Max CVSS
1
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 1High 0Medium 2Low 0
Severity
All severities3Critical1High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Grouper to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-103470
9.3
0%
Sep 30
In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate privileges
Affected: 5.8.3 through 5.22.5; 6.0.0 before 6.4.1; 7.0.0 before 7.5.1
CVE-2018-19794
6.1
1%
Dec 3
Cross-site scripting (XSS) vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter
Affected: 2.2; 2.3
CVE-2025-59714
4.9
0%
Sep 19
In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs
Affected: 5.17.1 before 5.20.5
Showing 3