a466350665

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

a466350665 records in CISA KEV

No a466350665 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Smart-sso 2 records MEDIUM

Records

4 records

TI-2026-75408 CVE-2026-111622 · GHSA-7rfc-8j8f-xgwj

Open redirect in smart-sso lets attackers steal OAuth2 codes

HIGH 68

smart-sso through 2.1.1 contains an open redirect vulnerability in the /login handler that allows unauthenticated attackers to steal OAuth2 authorization codes by supplying an unvalidated redirectUri parameter.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00429 Published 2026-10-16 No fix listed CWE-601

TI-2026-02563 CVE-2026-2971 · GHSA-333w-78wm-wpxh

a466350665 Smart-SSO Login login.html cross site scripting

MEDIUM 57

A vulnerability was found in a466350665 Smart-SSO up to 2.1.1.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00367 Published 2026-02-23 No fix listed CWE-79

TI-2026-02564 CVE-2026-2972 · GHSA-6h9v-2cfh-rp3v

a466350665 Smart-SSO Role Edit UserController.java save cross site scripting

MEDIUM 55

A vulnerability was determined in a466350665 Smart-SSO up to 2.1.1.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00299 Published 2026-02-23 No fix listed CWE-79

TI-2026-84349 CVE-2026-121543 · GHSA-cfjx-qgfm-vmq8

Incorrect authorization in smart-sso PermissionFilter enables admin access

MEDIUM 40

smart-sso through 2.0.1 contains an incorrect authorization vulnerability in PermissionFilter that allows any authenticated user to call admin console APIs because unlisted paths are permitted by default.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00486 Published 2026-11-03 No fix listed CWE-863

Open these records in search →

Critical	0
High	2
Medium	2
Low	0
No CVSS	0