Vendor
Apereo
48 known vulnerabilities in products by Apereo, 0 of them actively exploited (CISA KEV).
Key figures
48
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2014-4172 | Apereo .net Cas Client: security vulnerability | 9.8 | |
| Critical | CVE-2026-32985 | Xerte Online Toolkits: Missing Authentication for Critical Function | 9.8 | |
| High | CVE-2017-1000071 | phpCAS: Authentication Bypass | 8.1 | |
| Medium | CVE-2021-42567 | Apereo Central Authentication Service for WordPress: Cross-Site Scripting (XSS) | 6.1 | |
| Critical | CVE-2021-43821 | Files Accessible to External Parties in Opencast | 9.9 | |
| Critical | CVE-2024-4399 | CAS <= 1.0.0 - Unauthenticated SSRF | 9.1 | |
| High | CVE-2022-39369 | Service Hostname Discovery Exploitation in phpCAS | 8.0 | |
| High | CVE-2014-2296 | Apereo CAS Server: XML External Entity (XXE) | 8.8 | |
| High | CVE-2019-10754 | Apereo CAS: security vulnerability | 8.1 | |
| Critical | CVE-2023-4612 | MFA bypass in Apereo CAS | 9.8 | |
| High | CVE-2018-20000 | Apereo Bw-webdav: XML External Entity (XXE) | 7.5 | |
| Critical | CVE-2020-5206 | Authentication Bypass For Endpoints With Anonymous Access in OpenCast | 8.7 | |
| Critical | CVE-2026-59099 | Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure | 9.1 | |
| High | CVE-2021-43807 | HTTP Method Spoofing in Opencast | 7.5 | |
| Critical | CVE-2018-1000836 | Bedework bw-calendar-engine: XML External Entity (XXE) | 9.0 | |
| High | CVE-2021-32623 | Opencast vulnerable to billion laughs attack (XML bomb) | 8.1 | |
| High | CVE-2020-27178 | Apereo Central Authentication Service for WordPress: security vulnerability | 7.5 | |
| High | CVE-2020-5230 | Opencast uses unsafe identifiers | 7.7 | |
| Medium | CVE-2012-1104 | jasig project phpCAS: security vulnerability | 5.3 | |
| High | CVE-2020-5228 | Opencast allows unauthorized public access via OAI-PMH | 7.6 | |
| High | CVE-2024-52797 | Searching Opencast may cause a denial of service | 6.5 | |
| High | CVE-2018-16153 | Apereo Opencast: security vulnerability | 7.5 | |
| Not rated | CVE-2010-3692 | phpCAS: Path Traversal | — | |
| High | CVE-2020-5222 | Hard-Coded Key Used For Remember-me Token in OpenCast | 6.8 | |
| High | CVE-2024-11208 | Apereo CAS login session expiration | 3.7 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,
Products
| Opencast | 20 | 0 |
| Apereo CAS | 13 | 0 |
| phpCAS | 9 | 0 |
| Apereo CAS | 8 | 0 |