Apereo Bw-calendar-engine — known CVE vulnerabilities
Every CVE whose affected-product data names Apereo Bw-calendar-engine, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (1)
CVE-2018-1000836 — CVSS 9.0 (critical): bw-calendar-engine version <= bw-calendar-engine-3.12.0 contains a XML External Entity (XXE) vulnerability in IscheduleClient XML Parser…