Known vulnerabilities in Apache Syncope - page 2

Software CPE: cpe:2.3:a:apache_foundation:syncope:*:*:*:*:*:*:*:*
Total vulnerabilities: 42
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Syncope Apache Syncope is affected by 42 known vulnerabilities: 3 high, 4 medium, 35 low Critical High Medium Low

Vulnerabilities (42)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150211 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-77147
CWE-94 Low
No
No
4.0.8, 4.1.3 16.09.2026 SB2026091562
#VU149978 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-77051
CWE-89 Low
No
No
4.0.8, 4.1.3 15.09.2026 SB2026091562
#VU145289 - Improper isolation or compartmentalization
CVE-2026-42782
CWE-653 Low
No
No
4.0.6 25.08.2026 SB2026082593
#VU145288 - Improper Access Control
CVE-2026-42797
CWE-284 Low
No
No
4.0.6 25.08.2026 SB2026082593
#VU144739 - Improper isolation or compartmentalization
CVE-2026-63071
CWE-653 Low
No
No
4.0.7, 4.1.2 24.08.2026 SB20260824133
#VU144738 - Server-Side Request Forgery (SSRF)
CVE-2026-62418
CWE-918 Low
No
No
4.0.7, 4.1.2 24.08.2026 SB20260824133
#VU144737 - Improper Privilege Management
CVE-2026-62183
CWE-269 Medium
No
No
4.0.7, 4.1.2 24.08.2026 SB20260824133
#VU144736 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-57308
CWE-89 Low
No
No
4.0.7, 4.1.2 24.08.2026 SB20260824133
#VU144734 - Improper isolation or compartmentalization
CVE-2026-53421
CWE-653 Low
No
No
4.0.7, 4.1.2 24.08.2026 SB20260824133
#VU144733 - Improper isolation or compartmentalization
CVE-2026-53405
CWE-653 Low
No
No
4.0.7, 4.1.2 24.08.2026 SB20260824133
#VU118828 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-57738
CWE-94 Low
No
No
3.0.14, 4.0.2 28.11.2025 SB2025112814
#VU118827 - Use of Hard-coded Cryptographic Key
CVE-2025-65998
CWE-321 Low
No
No
3.0.15, 4.0.3 28.11.2025 SB2025112813
#VU99349 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45031
CWE-79 Low
No
No
3.0.9 25.10.2024 SB2024102534
#VU94767 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38503
CWE-79 Low
No
No
3.0.8 26.07.2024 SB2024072651
#VU46699 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-1961
CWE-94 High
No
No
2.1.6 14.09.2020 SB2020050445
#VU46698 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-1959
CWE-94 High
No
No
2.1.6 14.09.2020 SB2020050445
#VU46697 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17557
CWE-79 Low
No
No
2.1.6 14.09.2020 SB2020050445
#VU46695 - Permissions, Privileges, and Access Controls
CVE-2020-11977
CWE-264 Low
No
No
2.1.7 14.09.2020 SB2020091424
#VU15654 - XML Injection
CVE-2018-1321
CWE-91 Low
Available
No
1.2.11, 2.0.8 31.10.2018 SB2018103108
#VU15645 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1322
CWE-200 Low
Available
No
1.2.11, 2.0.8 31.10.2018 SB2018103108


Showing elements 21 - 40 out of 42