Read the docs

Apereo

Records48All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high17CVSS 7.0–8.9

Exploited now

Apereo records in CISA KEV

No Apereo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Cas Server · all components

Priority MEDIUM 42

XML external entity (XXE) vulnerability in java/org/jasig/cas/util/SamlUtils.java in Jasig CAS server before 3.4.12.1 and 3.5.x before 3.5.2.1, when Google Accounts Integration is enabled, allows remote unauthenticated u…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02055 Published 2018-07-20 No fix listed CWE-611
Open these records in search →