AApereo

Products

Exploited and recent CVEs

• CVE-2026-15243 High 7.4 Improper Validation of Certificate in CAS Client 0.3%
• CVE-2026-15243 High 7.4 Improper Validation of Certificate in CAS Client 0.3%
• CVE-2026-59099 Critical 9.1 Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure 0.5%
• CVE-2025-3986 Medium 4.3 Apereo CAS CasConfigurationMetadataServerController.java redos 0.7%
• CVE-2025-3985 Low 2.7 Apereo CAS ResponseEntity redos 0.6%
• CVE-2025-3984 Medium 5.0 Apereo CAS Groovy Code RegisteredServiceSimpleFormController.java saveService code injection 0.5%
• CVE-2024-11209 Medium 6.3 Apereo CAS 2FA login improper authentication 0.6%
• CVE-2024-11208 Low 3.7 Apereo CAS login session expiration 0.8%
• CVE-2024-11207 Medium 4.3 Apereo CAS login redirect 0.4%
• CVE-2023-28857 Medium 4.0 LDAP password leak in Apereo CAS - GHSL-2023-009 0.5%
• CVE-2022-39369 High 8.0 Service Hostname Discovery Exploitation in phpCAS 2.4%