Vulnerability Database

299,038

Total vulnerabilities in the database

CVE-2014-0111

Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions, "derived schema definition," "user / role templates," and "account links of resource mappings."

  • Published: Apr 17, 2014
  • Updated: Apr 13, 2023
  • CVE: CVE-2014-0111
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
apache / syncope 1.0.0 1.0.9
apache / syncope 1.1.0 1.1.7