Openequella vulnerabilities
Products
Newest
- apereo foundation openequella Stored XSS in pre-login notice via reachable legacy logon route 4.8 Medium
- apereo foundation openequella Unauthenticated IDOR Enables Disclosure of Other Users’ last-known details 6.9 Medium
- apereo foundation openequella XML External Entity (XXE) Injection in Metadata Field Allows Arbitrary File Read 7.1 High
- apereo foundation openequella XML External Entity (XXE) Vulnerability in SOAP Interface Allows External Entity Expansion 6.1 Medium
- apereo foundation openequella Unrestricted Command Execution via system.execute 9.4 Critical
- apereo foundation openequella Stored XSS via Pre-Login Notice Image Upload Serves Attacker HTML from Application Origin 4.8 Medium
- apereo foundation openequella openEQUELLA < 2026.1.0 Authenticated RCE via Java Deserialization in HTTP Invoker 8.7 High
- openequella openEQUELLA < 2026.1.0 Authenticated Stored SSTI via FreemarkerPortletRenderer 8.6 High