Apereo vulnerabilities
10 published CVEs name Apereo among the affected products.
- Published CVEs
- 10
- Last 12 months
- 2
- Critical
- 1
- Known exploited
- 0
Critical 1High 2Medium 6Low 1Not scored 0
CVEs per yearBy the year they were published
- 20221
- 20231
- 20243
- 20253
- 20262
Newest CVEs
- CVE-2026-15243
Improper Validation of Certificate in CAS Client
Apereo · Java Apereo CAS Client
High7.4 - CVE-2026-59099
Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure
apereo · cas
Critical9.3 - CVE-2025-3986
Apereo CAS CasConfigurationMetadataServerController.java redos
Apereo · CAS
Medium5.3 - CVE-2025-3985
Apereo CAS ResponseEntity redos
Apereo · CAS
Medium5.1 - CVE-2025-3984
Apereo CAS Groovy Code RegisteredServiceSimpleFormController.java saveService code injection
Apereo · CAS
Low2.3 - CVE-2024-11209
Apereo CAS 2FA login improper authentication
Apereo · CAS
Medium5.3 - CVE-2024-11208
Apereo CAS login session expiration
Apereo · CAS
Medium6.3 - CVE-2024-11207
Apereo CAS login redirect
Apereo · CAS
Medium5.3 - CVE-2023-28857
LDAP password leak in Apereo CAS - GHSL-2023-009
Apereo · CAS
Medium4.0 - CVE-2022-39369
Service Hostname Discovery Exploitation in phpCAS
apereo · phpCAS
High8.0