org.apache.syncope.core.am:syncope-core-am-logic (>=3.0.0-m0, <=4.0.7), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=3.0.0-m0, <=4.0.7) +39 more potentially affected by CVE-2026-78330 via org.apache.syncope.core:syncope-core-spring (>=3.0.0-m0, <=4.0.7)

org.apache.syncope.core:syncope-core-spring MAVEN version =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =4.0.2, =4.0.0-m0, =3.0.0-m0, =3.0.0-m0, =4.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =4.0.7 and more Source cves: CVE-2026-78330https://vulners.com/cve...

org.apache.syncope.core.am:syncope-core-am-logic (>=3.0.0-m0, <=4.0.7), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=3.0.0-m0, <=4.0.7) +15 more potentially affected by CVE-2026-75030 via org.apache.syncope.core.idrepo:syncope-core-idrepo-logic (>=3.0.0-m0, <=4.0.7)

org.apache.syncope.core.idrepo:syncope-core-idrepo-logic MAVEN version =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =4.0.2, =3.0.0-m0, =3.0.0-m0, =3.0.0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.6, =3.0.0-m0, =4.0.7...

org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=3.0.0-m0, <=4.0.7) potentially affected by CVE-2026-77181 via org.apache.syncope.core.am:syncope-core-am-logic (>=3.0.0-m0, <=4.0.7)

org.apache.syncope.core.am:syncope-core-am-logic MAVEN version =3.0.0-m0, =3.0.0-m0, =4.0.7 Source cves: CVE-2026-77181 Source advisory: SNYK:JAVA-ORGAPACHESYNCOPECOREAM-20186779...

org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.1.0-m0, <=4.1.2) potentially affected by CVE-2026-77181 via org.apache.syncope.core.am:syncope-core-am-logic (>=4.1.0-m0, <=4.1.2)

org.apache.syncope.core.am:syncope-core-am-logic MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.2 Source cves: CVE-2026-77181 Source advisory: SNYK:JAVA-ORGAPACHESYNCOPECOREAM-20186779...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper enforcement of entitlements in the ClientApp update process. An attacker can gain unauthorized access to update operations by possessing only the create entitlement, which is incorrectly checked f...

org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.1.0-m0, <=4.1.2) potentially affected by CVE-2026-73236 via org.apache.syncope.core.am:syncope-core-am-logic (>=4.1.0-m0, <=4.1.2)

org.apache.syncope.core.am:syncope-core-am-logic MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.2 Source cves: CVE-2026-73236 Source advisory: SNYK:JAVA-ORGAPACHESYNCOPECOREAM-20186791...

org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=3.0.0-m0, <=4.0.7) potentially affected by CVE-2026-73236 via org.apache.syncope.core.am:syncope-core-am-logic (>=3.0.0-m0, <=4.0.7)

org.apache.syncope.core.am:syncope-core-am-logic MAVEN version =3.0.0-m0, =3.0.0-m0, =4.0.7 Source cves: CVE-2026-73236 Source advisory: SNYK:JAVA-ORGAPACHESYNCOPECOREAM-20186791...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper handling of Realm hierarchy checks in delegated administration. An attacker can gain unauthorized access to resources in sibling Realms by exploiting prefix-based matching in the authorization...

org.apache.syncope.core.am:syncope-core-am-logic (>=4.1.0-m0, <=4.1.2), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.1.0-m0, <=4.1.2) +18 more potentially affected by CVE-2026-73195 via org.apache.syncope.core:syncope-core-provisioning-java (>=4.1.0-m0, <=4.1.2)

org.apache.syncope.core:syncope-core-provisioning-java MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.2 -...

org.apache.syncope.core.am:syncope-core-am-logic (>=3.0.0-m0, <=4.0.7), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=3.0.0-m0, <=4.0.7) +20 more potentially affected by CVE-2026-73195 via org.apache.syncope.core:syncope-core-provisioning-java (>=3.0.0-m0, <=4.0.7)

org.apache.syncope.core:syncope-core-provisioning-java MAVEN version =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =4.0.2, =3.0.0-m0, =3.0.0-m0, =3.0.0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =4.0.7 -...

org.apache.syncope.core.am:syncope-core-am-logic (>=4.0.0-m0, <=4.0.7), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.0.0-m0, <=4.0.7) +18 more potentially affected by CVE-2026-73470 via org.apache.syncope.core:syncope-core-provisioning-java (>=4.0.0-m0, <=4.0.7)

org.apache.syncope.core:syncope-core-provisioning-java MAVEN version =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.2, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.7 -...

org.apache.syncope.core.am:syncope-core-am-logic (>=4.1.0-m0, <=4.1.2), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.1.0-m0, <=4.1.2) +33 more potentially affected by CVE-2026-77147 via org.apache.syncope.core:syncope-core-spring (>=4.1.0-m0, <=4.1.2)

org.apache.syncope.core:syncope-core-spring MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.2 and more Source cves: CVE-2026-77147https://vu...

org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.0.0-m0, <=4.0.7) potentially affected by CVE-2026-77181 via org.apache.syncope.core.am:syncope-core-am-logic (>=4.0.0-m0, <=4.0.7)

org.apache.syncope.core.am:syncope-core-am-logic MAVEN version =4.0.0-m0, =4.0.0-m0, =4.0.7 Source cves: CVE-2026-77181 Source advisory: MEND:CVE-2026-77181...

org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.1.0-m0, <=4.1.2) potentially affected by CVE-2026-77181 via org.apache.syncope.core.am:syncope-core-am-logic (>=4.1.0-m0, <=4.1.2)

org.apache.syncope.core.am:syncope-core-am-logic MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.2 Source cves: CVE-2026-77181 Source advisory: MEND:CVE-2026-77181...

org.apache.syncope.core.am:syncope-core-am-logic (>=4.1.0-m0, <=4.1.2), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.1.0-m0, <=4.1.2) +36 more potentially affected by CVE-2026-77883 via org.apache.syncope.core:syncope-core-provisioning-api (>=4.1.0-m0, <=4.1.2)

org.apache.syncope.core:syncope-core-provisioning-api MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.2 and more Source cves:...

org.apache.syncope.core.am:syncope-core-am-logic (>=4.0.0-m0, <=4.0.7), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.0.0-m0, <=4.0.7) +33 more potentially affected by CVE-2026-78330 via org.apache.syncope.core:syncope-core-spring (>=4.0.0-m0, <=4.0.7)

org.apache.syncope.core:syncope-core-spring MAVEN version =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.2, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.7 and more Source cves: CVE-2026-78330https://vulne...

org.apache.syncope.core.am:syncope-core-am-logic (>=4.1.0-m0, <=4.1.2), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.1.0-m0, <=4.1.2) +33 more potentially affected by CVE-2026-87785 via org.apache.syncope.core:syncope-core-spring (>=4.1.0-m0, <=4.1.2)

org.apache.syncope.core:syncope-core-spring MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.2 and more Source cves: CVE-2026-87785https://vu...

org.apache.syncope.core.am:syncope-core-am-logic (>=4.1.0-m0, <=4.1.1), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.1.0-m0, <=4.1.1) +33 more potentially affected by CVE-2026-63071 via org.apache.syncope.core:syncope-core-spring (>=4.1.0-m0, <=4.1.1)

org.apache.syncope.core:syncope-core-spring MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.1 and more Source cves: CVE-2026-63071https://vu...

org.apache.syncope.core.am:syncope-core-am-logic (>=4.1.0-m0, <=4.1.1), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.1.0-m0, <=4.1.1) +33 more potentially affected by CVE-2026-53421 via org.apache.syncope.core:syncope-core-spring (>=4.1.0-m0, <=4.1.1)

org.apache.syncope.core:syncope-core-spring MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.1 and more Source cves: CVE-2026-53421https://vu...

org.apache.syncope.core.am:syncope-core-am-logic (>=3.0.0-m0, <=3.0.16), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=3.0.0-m0, <=3.0.16) +30 more potentially affected by CVE-2026-42782 via org.apache.syncope.core:syncope-core-spring (>=3.0.0-m0, <=3.0.16)

org.apache.syncope.core:syncope-core-spring MAVEN version =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0, =3.0.16 and more Source cves:...