IN
Vendor
Internet2
13
CVEs
0
On KEV
1
New 30D
Products
GR9.3
Grouper
Internet2
3 CVEs0 on KEV1 new
OP–
Opensaml
Internet2
3 CVEs0 on KEV0 new
SH–
Shibboleth-sp
Internet2
3 CVEs0 on KEV0 new
XM–
Xmltooling
Internet2
2 CVEs0 on KEV0 new
IP–
Identity Provider
Internet2
1 CVEs0 on KEV0 new
SP–
Service Provider
Internet2
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-103470 | GR Grouper Internet2 | 9.3 | Sep 30 | In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate privileges |
| CVE-2025-59714 | GR Grouper Internet2 | 4.9 | Sep 19 | In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs |
| CVE-2018-19794 | GR Grouper Internet2 | 6.1 | Dec 3 | Cross-site scripting (XSS) vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter |
| CVE-2013-6440 | OP Opensaml Internet2 | – | Feb 14 | The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to… |
| CVE-2009-3300 | IP Identity Provider Internet2 | – | Nov 6 | Multiple cross-site scripting (XSS) vulnerabilities in the Identity Provider (IdP) 1.3.x before 1.3.4 and 2.x before 2.1.5, and the Service Provider 1.3.x before 1.3.5 and 2.x… |
| CVE-2009-3476 | SH Shibboleth-sp Internet2 | – | Sep 29 | Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider software 1.3.x before 1.3.4, and XMLTooling before 1.2.2 as used in Internet2 Shibboleth… |
| CVE-2009-3475 | SH Shibboleth-sp Internet2 | – | Sep 29 | Internet2 Shibboleth Service Provider software 1.3.x before 1.3.3 and 2.x before 2.2.1, when using PKIX trust validation, does not properly handle a '\0' character in the subject… |
| CVE-2009-3474 | OP Opensaml Internet2 | – | Sep 29 | OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before 2.2.1, do not follow the KeyDescriptor element's Use… |