Vulnerabilities in Apereo
10 resultsCVE-2022-39369HIGHService Hostname Discovery Exploitation in phpCASEPSS 2.4%CVE-2024-11208MEDIUMApereo CAS login session expirationEPSS 0.8%CVE-2025-3986MEDIUMApereo CAS CasConfigurationMetadataServerController.java redosEPSS 0.7%CVE-2025-3985MEDIUMApereo CAS ResponseEntity redosEPSS 0.6%CVE-2024-11209MEDIUMApereo CAS 2FA login improper authenticationEPSS 0.6%CVE-2026-59099CRITICALApereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information DisclosureEPSS 0.5%CVE-2023-28857MEDIUMLDAP password leak in Apereo CAS - GHSL-2023-009EPSS 0.5%CVE-2025-3984LOWApereo CAS Groovy Code RegisteredServiceSimpleFormController.java saveService code injectionEPSS 0.5%CVE-2024-11207MEDIUMApereo CAS login redirectEPSS 0.4%CVE-2026-15243HIGHImproper Validation of Certificate in CAS ClientEPSS 0.3%