org.apache.syncope:syncope-core vulnerabilities (Maven)

7 vulnerabilities.

• org.apache.syncope:syncope-core Maven Apache Syncope: Default AES key used for internal password encryption CVE-2025-65998 Fix available 7.5 HighNovember 24, 2025
• org.apache.syncope:syncope-core Maven Injection in Apache Syncope CVE-2020-1961 Fix available 9.8 CriticalMay 4, 2020
• org.apache.syncope:syncope-core Maven Expression Language Injection in Apache Syncope CVE-2020-1959 Fix available 9.8 CriticalMay 4, 2020
• org.apache.syncope:syncope-core Maven Improper Restriction of XML External Entity Reference in org.apache.syncope:syncope-core CVE-2018-17186 Fix available 7.2 HighNovember 6, 2018
• org.apache.syncope:syncope-core Maven Improper Control of Interaction Frequency in Apache syncope-core CVE-2018-17184 Fix available 5.4 MediumNovember 6, 2018
• org.apache.syncope:syncope-core Maven Exposure of Sensitive Information to an Unauthorized Actor in Apache syncope-cope CVE-2018-1322 Public exploitFix available EPSS 19.9% 4.9 MediumMarch 20, 2018
• org.apache.syncope:syncope-core Maven High severity vulnerability that affects org.apache.syncope:syncope-core CVE-2018-1321 Public exploitFix available EPSS 17.5% 7.2 HighMarch 20, 2018