Apereo Foundation vulnerabilities
Products
Newest
- apereo foundation openequellaStored XSS in pre-login notice via reachable legacy logon route4.8 Medium
- apereo foundation openequellaUnauthenticated IDOR Enables Disclosure of Other Users’ last-known details6.9 Medium
- apereo foundation openequellaXML External Entity (XXE) Injection in Metadata Field Allows Arbitrary File Read7.1 High
- apereo foundation openequellaXML External Entity (XXE) Vulnerability in SOAP Interface Allows External Entity Expansion6.1 Medium
- apereo foundation openequellaUnrestricted Command Execution via system.execute9.4 Critical
- apereo foundation openequellaStored XSS via Pre-Login Notice Image Upload Serves Attacker HTML from Application Origin4.8 Medium
- apereo foundation openequellaopenEQUELLA < 2026.1.0 Authenticated RCE via Java Deserialization in HTTP Invoker8.7 High
- apereo cas, central authentication service +1 moreMFA bypass in Apereo CAS9.8 Critical