Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Apache Syncope — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in Apache Syncope, with AI-generated Chinese analysis, references, and POCs.

Vendor: Apache Software Foundation

CVE IDTitleCVSSSeverityPublished
CVE-2026-23794 Apache Syncope: Reflected XSS on Enduser Login CWE-79 6.1AIMediumAI2026-02-03
CVE-2026-23795 Apache Syncope: Console XXE on Keymaster parameters CWE-611 4.9AIMediumAI2026-02-03
CVE-2025-65998 Apache Syncope: Default AES key used for internal password encryption CWE-321 6.5AIMediumAI2025-11-24
CVE-2025-57738 Apache Syncope: Remote Code Execution by delegated administrators CWE-653 7.2AIHighAI2025-10-20
CVE-2024-45031 Apache Syncope: Stored XSS in Console and Enduser CWE-79 5.4AIMediumAI2024-10-24
CVE-2024-38503 Apache Syncope: HTML tags can be injected into Console or Enduser text fields CWE-79 5.4AIMediumAI2024-07-22
CVE-2020-11977 Apache Syncope 安全漏洞 7.2 -2020-09-15
CVE-2020-1961 Apache Syncope 注入漏洞 9.8 -2020-05-04
CVE-2019-17557 Apache Syncope 跨站脚本漏洞 5.4 -2020-05-04
CVE-2020-1959 Apache Syncope 代码注入漏洞 9.8 -2020-05-04
CVE-2018-17186 Apache Syncope 安全漏洞 7.2 -2018-11-06
CVE-2018-17184 Apache Syncope 跨站脚本漏洞 5.4 -2018-11-06
CVE-2018-1321 Apache Syncope 安全漏洞 7.2 -2018-03-20
CVE-2018-1322 Apache Syncope 安全漏洞 4.9 -2018-03-20

All 14 known CVE vulnerabilities affecting Apache Syncope with full Chinese analysis, references, and POCs where available.