What’s Vulnerable › Products
Apereo Central Authentication Service vulnerabilities
13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.
Check whether your Apereo Central Authentication Service version is affected
Latest Apereo Central Authentication Service vulnerabilities
- CVE-2025-3986 — Apereo CAS CasConfigurationMetadataServerController.java redos (CVSS 7.5)
- CVE-2025-3985 — Apereo CAS ResponseEntity redos (CVSS 4.9)
- CVE-2025-3984 — Apereo CAS Groovy Code RegisteredServiceSimpleFormController.java saveService code injection (CVSS 7.5)
- CVE-2024-11209 — Apereo CAS 2FA login improper authentication (CVSS 9.8)
- CVE-2024-11208 — Apereo CAS login session expiration (CVSS 8.1)
- CVE-2024-11207 — Apereo CAS login redirect (CVSS 5.4)
- CVE-2024-4399 — CAS <= 1.0.0 - Unauthenticated SSRF (CVSS 9.1)
- CVE-2023-4612 — MFA bypass in Apereo CAS (CVSS 9.8)
- CVE-2023-28857 — LDAP password leak in Apereo CAS - GHSL-2023-009 (CVSS 7.5)
- CVE-2021-42567 — (CVSS 6.1)
- CVE-2020-27178 — (CVSS 7.5)
- CVE-2019-10754 — (CVSS 8.1)
- CVE-2015-1169 — (CVSS 7.5)