Miniorange Saml Sso - Service Provider — known CVE vulnerabilities

Every CVE whose affected-product data names Miniorange Saml Sso - Service Provider, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2026-5343 — CVSS 7.4 (high): Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal SAML SSO - Service Provider allows Privilege Escalation. This…
• CVE-2026-3217 — CVSS 6.1 (medium): Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider…