org.apache.syncope.ext.flowable:syncope-ext-flowable-bpmn vulnerabilities

CVEs whose affected-version data names the org.apache.syncope.ext.flowable:syncope-ext-flowable-bpmn package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-109083None

4d ago

Apache Syncope: Remote Code Execution via Flowable JUEL expression

Improper isolation or compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can import arbitrary BPMN process definitions via the REST API and then start the process. When a BPMN process conta…

▾ SunlitApache Software Foundation · org.apache.syncope.ext.flowable:syncope-ext-flowable-bpmnEPSS 0.22%via CVEORG