Package · Maven

org.apache.syncope.core:syncope-core-provisioning-api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 4.9

CVE-2026-42797

Apache Syncope: JexlContextBuilder Information Disclosure

Exposure of Sensitive Information Through Data Queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which allows any administrator with sufficient entitlements for User…

Apache Software Foundation Apache Syncope org.apache.syncope.core:syncope-core-provisioning-api Maven

May 25, 2026