org.apache.syncope:syncope-standalone (1.1.3) potentially affected by CVE-2018-17186 via org.apache.syncope:syncope-core (1.1.3)

org.apache.syncope:syncope-core MAVEN version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope:syncope-core and may be impacted: - org.apache.syncope:syncope-standalone 1.1.3 Source cves: CVE-2018-17186 Source advisory:...

org.apache.syncope:syncope-standalone (1.1.0) potentially affected by CVE-2018-17186 via org.apache.syncope:syncope-core (1.1.0)

org.apache.syncope:syncope-core MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope:syncope-core and may be impacted: - org.apache.syncope:syncope-standalone 1.1.0 Source cves: CVE-2018-17186 Source advisory:...

org.apache.syncope:syncope-core-upgrader (1.2.10) potentially affected by CVE-2018-17186 via org.apache.syncope:syncope-core (1.2.10)

org.apache.syncope:syncope-core MAVEN version 1.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope:syncope-core and may be impacted: - org.apache.syncope:syncope-core-upgrader 1.2.10 Source cves: CVE-2018-17186 Source advisory:...

org.apache.syncope:syncope-core-upgrader (1.2.11) potentially affected by CVE-2018-17186 via org.apache.syncope:syncope-core (1.2.11)

org.apache.syncope:syncope-core MAVEN version 1.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope:syncope-core and may be impacted: - org.apache.syncope:syncope-core-upgrader 1.2.11 Source cves: CVE-2018-17186 Source advisory:...

org.apache.syncope:syncope-standalone (1.1.4) potentially affected by CVE-2018-17186 via org.apache.syncope:syncope-core (1.1.4)

org.apache.syncope:syncope-core MAVEN version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope:syncope-core and may be impacted: - org.apache.syncope:syncope-standalone 1.1.4 Source cves: CVE-2018-17186 Source advisory:...

org.apache.syncope:syncope-standalone (1.1.5) potentially affected by CVE-2018-17186 via org.apache.syncope:syncope-core (1.1.5)

org.apache.syncope:syncope-core MAVEN version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope:syncope-core and may be impacted: - org.apache.syncope:syncope-standalone 1.1.5 Source cves: CVE-2018-17186 Source advisory:...

org.apache.syncope:syncope-standalone (1.1.6) potentially affected by CVE-2018-17186 via org.apache.syncope:syncope-core (1.1.6)

org.apache.syncope:syncope-core MAVEN version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope:syncope-core and may be impacted: - org.apache.syncope:syncope-standalone 1.1.6 Source cves: CVE-2018-17186 Source advisory:...

org.apache.syncope:syncope-standalone (1.1.7) potentially affected by CVE-2018-17186 via org.apache.syncope:syncope-core (1.1.7)

org.apache.syncope:syncope-core MAVEN version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope:syncope-core and may be impacted: - org.apache.syncope:syncope-standalone 1.1.7 Source cves: CVE-2018-17186 Source advisory:...

org.apache.syncope:syncope-core-upgrader (1.2.0-m1) potentially affected by CVE-2018-17186 via org.apache.syncope:syncope-core (1.2.0-m1)

org.apache.syncope:syncope-core MAVEN version 1.2.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope:syncope-core and may be impacted: - org.apache.syncope:syncope-core-upgrader 1.2.0-m1 Source cves: CVE-2018-17186 Source advisory:...

org.apache.syncope:syncope-core-upgrader (1.2.1) potentially affected by CVE-2018-17186 via org.apache.syncope:syncope-core (1.2.1)

org.apache.syncope:syncope-core MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope:syncope-core and may be impacted: - org.apache.syncope:syncope-core-upgrader 1.2.1 Source cves: CVE-2018-17186 Source advisory:...

org.apache.syncope:syncope-core-upgrader (1.2.2) potentially affected by CVE-2018-17186 via org.apache.syncope:syncope-core (1.2.2)

org.apache.syncope:syncope-core MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope:syncope-core and may be impacted: - org.apache.syncope:syncope-core-upgrader 1.2.2 Source cves: CVE-2018-17186 Source advisory:...

org.apache.syncope:syncope-core-upgrader (1.2.8) potentially affected by CVE-2018-17186 via org.apache.syncope:syncope-core (1.2.8)

org.apache.syncope:syncope-core MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope:syncope-core and may be impacted: - org.apache.syncope:syncope-core-upgrader 1.2.8 Source cves: CVE-2018-17186 Source advisory:...

org.apache.syncope:syncope-core-upgrader (1.2.9) potentially affected by CVE-2018-17186 via org.apache.syncope:syncope-core (1.2.9)

org.apache.syncope:syncope-core MAVEN version 1.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope:syncope-core and may be impacted: - org.apache.syncope:syncope-core-upgrader 1.2.9 Source cves: CVE-2018-17186 Source advisory:...

CVE-2018-17186

CVE-2018-17186 affects Apache Syncope (admin/workflow entitlements) where XML External Entity (XXE) via DTD in workflow definitions allows an attacker to read/write files and execute code. Multiple sources (CNVD/NVD/OSV/Veracode/GHSA) describe the vulnerability as involving DTD processing to perf...