CVE-2020-9437: Secureauth Identity Provider

Medium severity, CVSS 4.8. EPSS: 1% chance of exploitation in the next 30 days.

SecureAuth.aspx in SecureAuth IdP 9.3.0 suffers from a client-side template injection that allows for script execution, in the same manner as XSS.

Affected products

• Secureauth Secureauth Identity Provider: version 9.3.0 only

Published 2020-06-25. Last modified 2026-06-17.