apereo Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by apereo

JSON RSS CSV 🔔 Create Alert Trigger

2 July 2026

Cryptographic Vulnerability in Apereo CAS Version 7.3.0
CVE-2026-59099
ApereoCas👾🟡9.3CRITICAL

14 November 2024

Session Expiration Vulnerability in Apereo CAS by Apereo
CVE-2024-11208
ApereoCentral Authentication...8.1HIGH
Improper Authentication Vulnerability in Apereo CAS 6.6's 2FA Component
CVE-2024-11209
ApereoCentral Authentication...9.8CRITICAL

12 December 2023

Authentication Credential Leakage in Apereo Opencast Video Management Software
CVE-2018-16153
ApereoOpencast7.5HIGH

9 November 2023

MFA bypass in Apereo CAS
CVE-2023-4612
Apereo FoundationCas9.8CRITICAL

1 November 2022

Service Hostname Discovery Exploitation in phpCAS
CVE-2022-39369
ApereoPHPcas8HIGH

16 October 2020

Multifactor Authentication Flaw in Apereo CAS by Apereo
CVE-2020-27178
ApereoCentral Authentication...7.5HIGH

24 January 2020

URL Parameter Injection Vulnerability in Jasig Java CAS Client and .NET CAS Client
CVE-2014-4172
Apereo.net Cas Client9.8CRITICAL

23 September 2019

Predictable Token Generation in Apereo CAS Due to Weak Randomization
CVE-2019-10754
ApereoApereo Cas8.1HIGH

20 December 2018

XML External Entity Vulnerability in bw-calendar-engine by Bedework
CVE-2018-1000836
ApereoBw-calendar-engine9CRITICAL

10 December 2018

XXE Attack Vulnerability in Apereo Bedework WebDAV Interface
CVE-2018-20000
ApereoBw-webdav7.5HIGH

20 July 2018

XML External Entity Vulnerability in Jasig CAS Server
CVE-2014-2296
ApereoCas Server8.8HIGH

17 July 2017

Authentication Bypass Vulnerability in Jasig phpCAS Authentications
CVE-2017-1000071
ApereoPHPcas8.1HIGH