Threats affecting pkg:maven/Apache Software Foundation/org.apache.syncope.core:syncope-core-persistence-neo4j

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.6%	CVE-2026-86460Apache Syncope · SQL Injection Critical9.8EPSS 0.6%2026-09-14CVE Database V5CVE-2026-86460 Cypher injection vulnerability in the Neo4j persistence layer when processing some FIQL search conditions. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 through 4.0.7, from 4.1.0-M0 through 4.1.2. Users are recommended to upgrade to version 4.0.8 / 4.1.3, which fix this issue. EPSS 0.6%Vulnerability Apache Software Foundation CWE-89 #ghsa-h6hm-vrjv-9gv4	CVE Database V5	2026-09-14

Page 1 of 1