Advisories · Technology
Drupal SAML SSO - Service Provider.
Every CVE that names Drupal SAML SSO - Service Provider among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
SAML SSO - Service Provider - Critical - Improper access control - SA-CONTRIB-2026-141
- Drupal SAML SSO - Service Provider
- Broken access control
- CVSS 4.8 Medium
SAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142
- Drupal SAML SSO - Service Provider
- Weak cryptography or TLS
- CVSS 5.4 Medium
SAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-143
- Drupal SAML SSO - Service Provider
- Open redirect
- CVSS 4.8 Medium
SAML SSO - Service Provider - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144
- Drupal SAML SSO - Service Provider
- CWE-208
- CVSS 4.8 Medium
SAML SSO - Service Provider - Moderately critical - Authentication bypass - SA-CONTRIB-2026-145
- Drupal SAML SSO - Service Provider
- Weak cryptography or TLS
- CVSS 3.5 Low
SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-146
- Drupal SAML SSO - Service Provider
- Cross-site scripting (XSS)
- CVSS 3.3 Low
SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-147
- Drupal SAML SSO - Service Provider
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
SAML SSO - Service Provider - Moderately critical - Embedded credentials - SA-CONTRIB-2026-148
- Drupal SAML SSO - Service Provider
- Hard-coded credentials
- CVSS 3.8 Low
SAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-149
- Drupal SAML SSO - Service Provider
- Information disclosure
- CVSS 3.1 Low
SAML SSO - Service Provider - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-150
- Drupal SAML SSO - Service Provider
- Authentication bypass
- CVSS 3.3 Low
SAML SSO - Service Provider - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151
- Drupal SAML SSO - Service Provider
- Server-side request forgery (SSRF)
- CVSS 7.4 High
SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031
- Drupal SAML SSO - Service Provider
- CWE-754
- CVSS 6.1 Medium
SAML SSO - Service Provider - Critical - Cross-site scripting - SA-CONTRIB-2026-018
- Drupal SAML SSO - Service Provider
- Cross-site scripting (XSS)