Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Syncope

45 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-62183 Public exploit

    Apache Syncope: User self-service privilege escalation

    Improper Privilege Management vulnerability in Apache Syncope. When: * the all-Java user workflow adapter is configured, or * the Flowable user workflow adapter is configured, bearing a BPMN definition not requiring admin approval for user self registration o…

    Apache Software Foundation Apache Syncope