Internet2 Grouper — known CVE vulnerabilities

Every CVE whose affected-product data names Internet2 Grouper, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2025-59714 — CVSS 6.5 (medium): In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs.
• CVE-2018-19794 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary…