Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-103470

Privilege Escalation via Rule Editing in Internet2 Grouper

In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate privileges.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Internet2
Products
Grouper
CVE-2024-39848

Internet2 Grouper before 5.6 allows authentication bypass when LDAP authentication is used in certain ways. This is related to internet2.middleware.grouper.ws.security.WsGrouperLdapAuthentication and the use of the UyY29r password for the M3vwHr account. This also affects "Grouper for Web Services" before 4.13.1.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Internet2
Products
Grouper
CVE-2025-59714

In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Internet2
Products
Grouper
CVE-2018-19794

Cross-site scripting (XSS) vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Internet2
Products
Grouper