org.apache.syncope.core:syncope-core-provisioning-api vulnerabilities

CVEs whose affected-version data names the org.apache.syncope.core:syncope-core-provisioning-api package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-77883Medium· 4.9

1w ago

Exposure of sensitive information through data queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which allows any administrator with sufficien…

Exposure of sensitive information through data queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which allows any administrator with sufficien…

▾ SunlitApache Software Foundation · org.apache.syncope.core:syncope-core-provisioning-apiEPSS 0.38%via NVD