Approved changes feed: RSS · Atom

cpe:2.3:a:apache:syncope:1.0.3:*:*:*:*:*:*:*

part: a version: 1.0.3 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductSyncope (8438ac48-fa54-5bcf-9ee5-40463e87f414)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/syncope purl2cpe 2026-06-01 10:14:25.751008
pkg:docker/apache/syncope purl2cpe 2026-06-01 10:14:25.751009
pkg:github/apache/syncope purl2cpe 2026-06-01 10:14:25.751010
pkg:maven/org.apache.syncope/syncope purl2cpe 2026-06-01 10:14:25.751012

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1322 vulnerable 2026-06-08 05:11:17.700484 Details available
An administrator with user search entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can recover sensitive security values using the fiql and orderby parameters.
Published: 2018-03-20T17:00:00.000Z
Updated: 2024-09-16T17:03:34.787Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.