Miniorange Oauth Single Sign On Sso vulnerabilities
3 known vulnerabilities affecting miniorange/oauth_single_sign_on_sso.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH1
Vulnerabilities
Page 1 of 1
CVE-2026-28008P2CRITICALCVSS 9.8≥ n/a, ≤ 7.0.02026-08-13
CVE-2026-28008 [CRITICAL] CWE-290 CVE-2026-28008: Unauthenticated Broken Authentication in OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 versions
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 versions.
nvd
CVE-2026-97274P2CRITICALCVSS 9.8≥ n/a, ≤ 7.1.22026-09-30
CVE-2026-97274 [CRITICAL] CWE-290 CVE-2026-97274: Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client) <= 7.1.2 versions.
Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client) <= 7.1.2 versions.
nvd
CVE-2022-34155P3HIGHCVSS 8.8≥ n/a, ≤ 6.23.32023-07-18
CVE-2022-34155 [HIGH] CWE-287 CVE-2022-34155: Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) plugin
Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) plugin allows Authentication Bypass.This issue affects OAuth Single Sign On – SSO (OAuth Client): from n/a through 6.23.3.
nvd