Package · Maven

org.apache.ws.security:wss4j

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.5

CVE-2015-0226

Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J

Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to recover the plaintext form of a symmetric key via a series…

wss4j org.apache.ws.security:wss4j org.apache.wss4j:wss4j-ws-security-dom Debian Maven

Oct 30, 2017