Product by Apereo

Apereo CAS

10 known vulnerabilities in Apereo CAS (Apereo), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Apereo CAS (Apereo)

Critical	CVE-2024-4399	CAS <= 1.0.0 - Unauthenticated SSRF also in 1 other product	9.1	23.05.2024
Critical	CVE-2023-4612	MFA bypass in Apereo CAS also in 2 other products	9.8	09.11.2023
Critical	CVE-2026-59099	Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure	9.1	02.07.2026
High	CVE-2024-11208	Apereo CAS login session expiration also in 1 other product	3.7	14.11.2024
Critical	CVE-2024-11209	Apereo CAS 2FA login improper authentication also in 1 other product	6.3	14.11.2024
High	CVE-2025-3986	Apereo CAS CasConfigurationMetadataServerController.java redos also in 1 other product	4.3	27.04.2025
Medium	CVE-2025-3985	Apereo CAS ResponseEntity redos also in 1 other product	2.7	27.04.2025
High	CVE-2025-3984	Apereo CAS Groovy Code RegisteredServiceSimpleFormController.java saveService code injection also in 1 other product	5.0	27.04.2025
Medium	CVE-2024-11207	Apereo CAS login redirect also in 1 other product	4.3	14.11.2024
High	CVE-2023-28857	LDAP password leak in Apereo CAS - GHSL-2023-009 also in 1 other product	4.0	27.06.2023