Read the docs

Apereo

Records48All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high17CVSS 7.0–8.9

Exploited now

Apereo records in CISA KEV

No Apereo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Opencast 20 records MEDIUM Central Authentication Service 13 records HIGH Phpcas 9 records MEDIUM .net Cas Client 1 record MEDIUM Bw-calendar-engine 1 record MEDIUM Bw-webdav 1 record LOW Cas Server 1 record MEDIUM Java Cas Client 1 record MEDIUM

Records

1 record in Bw-webdav · all components

TI-2018-14180 CVE-2018-20000 · GHSA-5p52-j8pw-j7x5

Apereo Bedework bw-webdav before 4.0.3 allows XXE attacks, as demonstrated by an…

Priority LOW 36

Apereo Bedework bw-webdav before 4.0.3 allows XXE attacks, as demonstrated by an invite-reply document that reads a local file, related to webdav/servlet/common/MethodBase.java and webdav/servlet/common/PostRequestPars.j…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01687 Published 2018-12-10 Fixed in 4.0.3 CWE-611
Open these records in search →