Login Request a demo
CA
Product
cas
by apereo · last CVE Jul 2, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 4Medium 2Low 0
Severity
All severities8Critical2High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add cas to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-11209
9.8
1%
Nov 14
Apereo CAS 2FA login improper authentication
Affected: 6.6
CVE-2026-59099
9.1
1%
Jul 2
Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure
Affected: 7.3.0 before 8.0.0-RC6
CVE-2024-11208
8.1
1%
Nov 14
Apereo CAS login session expiration
Affected: 6.6
CVE-2025-3986
7.5
1%
Apr 27
Apereo CAS CasConfigurationMetadataServerController.java redos
Affected: 5.2.6
CVE-2025-3984
7.5
0%
Apr 27
Apereo CAS Groovy Code RegisteredServiceSimpleFormController.java saveService code injection
Affected: 5.2.6
CVE-2023-28857
7.5
1%
Jun 27
LDAP password leak in Apereo CAS - GHSL-2023-009
Affected: >= 6.5.0, < 6.5.9.1; >= 6.6.0, < 6.6.6
CVE-2024-11207
5.4
0%
Nov 14
Apereo CAS login redirect
Affected: 6.6
CVE-2025-3985
4.9
1%
Apr 27
Apereo CAS ResponseEntity redos
Affected: 5.2.6
Showing 8