org.apache.syncope.core:syncope-core-persistence-neo4j vulnerabilities

CVEs whose affected-version data names the org.apache.syncope.core:syncope-core-persistence-neo4j package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-86460Critical· 9.8

1w ago

Cypher injection vulnerability in the Neo4j persistence layer when processing some FIQL search conditions. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 through 4.0.7, from 4.1.0-M0 through 4.1.2. U…

Cypher injection vulnerability in the Neo4j persistence layer when processing some FIQL search conditions. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 through 4.0.7, from 4.1.0-M0 through 4.1.2. U…

▾ MidnightApache Software Foundation · org.apache.syncope.core:syncope-core-persistence-neo4jEPSS 0.56%via NVD