Internet2

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Internet2 records in CISA KEV

No Internet2 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Opensaml 3 records MEDIUM Shibboleth-sp 3 records MEDIUM Grouper 2 records MEDIUM Xmltooling 2 records MEDIUM Identity Provider 1 record LOW Service Provider 1 record LOW

Records

2 records in Grouper · all components

TI-2025-37174 CVE-2025-59714 · GHSA-9w3p-67mx-gphr

In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs.

MEDIUM 64

In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00266 Published 2025-09-19 Fixed in 5.20.5 CWE-863

TI-2018-14017 CVE-2018-19794 · GHSA-x4xr-9wg9-gx5c

Cross-site scripting (XSS) vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and…

LOW 29

Cross-site scripting (XSS) vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01083 Published 2018-12-03 No fix listed CWE-79

Open these records in search →

Critical	2
High	2
Medium	3
Low	1
No CVSS	0