Skip to content

Vendor

org.apache.synapse vulnerabilities

1 published CVE affecting org.apache.synapse, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of org.apache.synapse alerts

Products

Latest org.apache.synapse CVEs

Newest publication first

  1. CVE-2017-15708 Remote Code Execution in Apache Synapse

    Published
    CriticalCVSS 9.8 EPSS 17.9%

    In Apache Synapse, by default no authentication is required for Java Remote Method Invocation (RMI). So Apache Synapse 3.0.1 or all previous releases (3.0.0, 2.1.0, 2.0.0, 1.2, 1.1.2, 1.1.1) allows remote code execution attacks that can be performed by injecting specially crafted...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.