org.apache.syncope:syncope-core
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Apache Syncope's AES encryption stores hard-coded passwords in internal database | org.apache.syncope:syncope-core | Maven | High | Fix reported | |
| Improper Restriction of XML External Entity Reference in org.apache.syncope:syncope-core | org.apache.syncope:syncope-core | Maven | High | Fix reported | |
| Exposure of Sensitive Information to an Unauthorized Actor in Apache syncope-cope | org.apache.syncope:syncope-core | Maven | Medium | Fix reported | |
| High severity vulnerability that affects org.apache.syncope:syncope-core | org.apache.syncope:syncope-core | Maven | High | Fix reported | |
| Injection in Apache Syncope | org.apache.syncope:syncope-core | Maven | High | Fix reported | |
| Expression Language Injection in Apache Syncope | org.apache.syncope:syncope-core | Maven | Critical | Fix reported | |
| Improper Control of Interaction Frequency in Apache syncope-core | org.apache.syncope:syncope-core | Maven | Medium | Fix reported |