Miniorange SAML SSO - Service Provider vulnerabilities

2 CVEs affecting Miniorange SAML SSO - Service Provider, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-5343, published 2026-05-28.

More from Miniorange.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-5343, published 2026-05-28. High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal SAML SSO - Service Provider allows Privilege Escalation. This issue affects SAML SSO - Service Provider: from 0.0.0…
• CVE-2026-3217, published 2026-03-25. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider allows Cross-Site Scripting (XSS).This issue affects SAML SSO…