Priority LOW 32
Apereo CAS Client accepts any CA-trusted certificate for any hostname, provided the URL the client is calling matches the configured allowlist or regex.
CVSS 4.0HIGH 7.4· Network · No auth · User interaction · EPSS 0.0026 · Published 2026-07-24 · No fix listed CWE-297
Priority HIGH 81
Apereo CAS 7.3.0 before 8.0.0-RC6 contains a cryptographic vulnerability that allows remote unauthenticated attackers to recover plaintext conversation state by exploiting AES-GCM initialization vector reuse across the s…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00548 · Published 2026-07-02 · Fixed in 8.0.0-RC6 CWE-323
Priority HIGH 81
Xerte Online Toolkits versions 3.14 and earlier contain an unauthenticated arbitrary file upload vulnerability in the template import functionality that allows remote attackers to execute arbitrary code by uploading a cr…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.01538 · Published 2026-03-20 · No fix listed CWE-306
Priority MEDIUM 45
Opencast is a free, open-source platform to support the management of educational audio and video content.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00301 · Published 2025-10-08 · Fixed in 17.8, 18.2 CWE-200
Priority LOW 23
Opencast is a free, open-source platform to support the management of educational audio and video content.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00217 · Published 2025-10-08 · Fixed in 17.8, 18.2 CWE-79
Priority LOW 14
Opencast is a free, open-source platform to support the management of educational audio and video content.
CVSS 4.0LOW 2.7· Network · No auth · No interaction · EPSS 0.00401 · Published 2025-08-29 · Fixed in 17.7, 18.1 CWE-23
Priority LOW 29
Opencast is a free, open-source platform to support the management of educational audio and video content.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00429 · Published 2025-07-26 · Fixed in 17.6 CWE-200
Priority LOW 25
A vulnerability was found in Apereo CAS 5.2.6.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00652 · Published 2025-04-27 · No fix listed CWE-1333
Priority LOW 24
A vulnerability was found in Apereo CAS 5.2.6.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00634 · Published 2025-04-27 · No fix listed CWE-1333
Priority LOW 13
A vulnerability was found in Apereo CAS 5.2.6 and classified as critical.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00494 · Published 2025-04-27 · No fix listed CWE-74
Priority LOW 35
Opencast is free and open source software for automated video capture and distribution.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00922 · Published 2024-11-21 · Fixed in 13.10, 14.3 +1 CWE-770
Priority MEDIUM 57
A vulnerability was found in Apereo CAS 6.6.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0062 · Published 2024-11-14 · No fix listed CWE-287
Priority MEDIUM 61
A vulnerability was found in Apereo CAS 6.6 and classified as problematic.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00751 · Published 2024-11-14 · No fix listed CWE-613
Priority MEDIUM 57
A vulnerability has been found in Apereo CAS 6.6 and classified as problematic.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0038 · Published 2024-11-14 · No fix listed CWE-601
Priority MEDIUM 51
The does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attack
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01821 · Published 2024-05-23 · No fix listed CWE-918
Priority MEDIUM 40
An issue was discovered in Apereo Opencast 4.x through 10.x before 10.6.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00829 · Published 2023-12-12 · Fixed in 10.6 CWE-522
Priority MEDIUM 44
Improper Authentication vulnerability in Apereo CAS in jakarta.servlet.http.HttpServletRequest.getRemoteAddr method allows Multi-Factor Authentication bypass.This issue affects CAS: through 7.0.0-RC7.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01115 · Published 2023-11-09 · No fix listed CWE-302
Priority HIGH 66
Apereo CAS is an open source multilingual single sign-on solution for the web.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00503 · Published 2023-06-27 · Fixed in 6.5.9.1, 6.6.6 CWE-200
Priority LOW 27
Opencast is a free, open-source platform to support the management of educational audio and video content.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0039 · Published 2022-11-28 · Fixed in 12.5 CWE-601
Priority MEDIUM 41
phpCAS is an authentication library that allows PHP applications to easily authenticate users via a Central Authentication Service (CAS) server.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.02433 · Published 2022-11-01 · Fixed in 1.6.0 CWE-1287
Priority LOW 25
Opencast is a free and open source solution for automated video capture and distribution at scale.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00609 · Published 2022-05-24 · Fixed in 10.14, 11.7 CWE-287
Priority MEDIUM 46
Opencast is an Open Source Lecture Capture & Video Management for Education.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.02029 · Published 2021-12-14 · Fixed in 10.6 CWE-552
Priority LOW 36
Opencast is an Open Source Lecture Capture & Video Management for Education.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.01463 · Published 2021-12-14 · Fixed in 9.10 CWE-290
Priority LOW 38
Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.08191 · Published 2021-12-07 · Fixed in 6.4.2 CWE-79
Priority LOW 38
Opencast is a free and open source solution for automated video capture and distribution.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01254 · Published 2021-06-15 · Fixed in 9.6 CWE-776
Load more
THREATIST.IORead the docs