Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Syncope

45 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-62183 Public exploit

    Apache Syncope: User self-service privilege escalation

    Improper Privilege Management vulnerability in Apache Syncope. When: * the all-Java user workflow adapter is configured, or * the Flowable user workflow adapter is configured, bearing a BPMN definition not requiring admin approval for user self registration o…

    Apache Software Foundation Apache Syncope
  • Medium 4.9
    CVE-2018-1322 Public exploit EPSS 20%

    Exposure of Sensitive Information to an Unauthorized Actor in Apache syncope-cope

    An administrator with user search entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can recover sensitive security values using the fiql and orderby parameters.

    Apache Software Foundation Apache Syncope org.apache.syncope:syncope-core Maven
  • High 7.2
    CVE-2018-1321 Public exploit EPSS 18%

    High severity vulnerability that affects org.apache.syncope:syncope-core

    An administrator with report and template entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can use XSL Transformations (XSLT) to perform malicious operations, includin…

    Apache Software Foundation Apache Syncope org.apache.syncope:syncope-core Maven