CA
Product
Central Authentication Service
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 3Low 0
Watch
Add Central Authentication Service to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-11208 | 8.1 | Nov 14 | A vulnerability was found in Apereo CAS 6.6 and classified as problematic Affected: 6.6.0 |
| CVE-2019-10754 | 8.1 | Sep 23 | Multiple classes used within Apereo CAS before release 6.1.0-RC5 makes use of apache commons-lang3 RandomStringUtils for token and ID generation which makes them predictable due… Affected: through 6.0.5.1; 6.1.0; 6.1.0; 6.1.0; 6.1.0 |
| CVE-2025-3986 | 7.5 | Apr 27 | Apereo CAS CasConfigurationMetadataServerController.java redos Affected: 5.2.6 |
| CVE-2025-3984 | 7.5 | Apr 27 | Apereo CAS Groovy Code RegisteredServiceSimpleFormController.java saveService code injection Affected: 5.2.6 |
| CVE-2023-28857 | 7.5 | Jun 27 | Apereo CAS is an open source multilingual single sign-on solution for the web Affected: 6.5.0 before 6.5.9.1; 6.6.0 before 6.6.6 |
| CVE-2020-27178 | 7.5 | Oct 16 | Apereo CAS 5.3.x before 5.3.16, 6.x before 6.1.7.2, 6.2.x before 6.2.4, and 6.3.x before 6.3.0-RC4 mishandles secret keys with Google Authenticator for multifactor authentication Affected: 5.3.0 before 5.3.16; 6.0.0 before 6.1.7.2; 6.2.0 before 6.2.4; 6.3.0; 6.3.0; 6.3.0 |
Showing 6