apereo phpcas

Name: apereo phpcas
Brand: apereo

productUS

cpe:2.3:a:apereo:phpcas:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical2high5medium1low

updated 2026-10-27

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2014-4172US	critical9.8	6.06% (93rd)	—	1.3.3	2020-01-24	< 1.3.3
CVE-2010-3692US	medium6.4	3.63% (89th)	—	no fix	2010-10-07	30 versions
CVE-2017-1000071US	high8.1	3.54% (89th)	—	no fix	2017-07-17	= 1.3.4
CVE-2010-3690US	medium4.3	2.51% (85th)	—	no fix	2010-10-07	30 versions
CVE-2022-39369US	high8.0	2.00% (81st)	—	1.6.0	2022-11-01	< 1.6.0
CVE-2012-1104US	medium5.3	1.71% (77th)	—	no fix	2019-12-05	= 1.2.2
CVE-2012-5583US	medium5.8	0.58% (48th)	—	no fix	2014-06-06	2 versions
CVE-2012-1105US	medium5.5	0.46% (40th)	—	no fix	2019-12-05	= 1.2.2
CVE-2010-3691US	low3.3	0.35% (29th)	—	no fix	2010-10-07	30 versions

The flaw types (CWEs) most of these CVEs share.

CWE-1287Improper Validation of Specified Type of Input1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-310CWE-3101 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')1 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.