Read the docs

Apereo

Records48All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high17CVSS 7.0–8.9

Exploited now

Apereo records in CISA KEV

No Apereo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Java Cas Client · all components

Priority MEDIUM 51

A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow rem…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06057 Published 2020-01-24 Partial fix · 1.0.2, 3.3.2 +1 CWE-74
Open these records in search →