CVE-2014-0111

Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL…

published April 17, 2014

CVSS
—
EPSS
3%
Percentile
88.5
In the wild
Unconfirmed
What it is

Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions, "derived schema definition," "user / role templates," and "account links of resource mappings."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03311 · 88.5th percentile
Published
2014-04-17T14:00Z
EPSS history
Timeline
  • 17 APR 14:00Z
    Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL…
    cvelistv5