Skip to content
OpenAdvisories

Package · Maven

wss4j:wss4j

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.9
    CVE-2011-2487

    Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J

    The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.

    Red Hat Apache WSS4J JBossWS Maven
  • Medium —
    CVE-2015-0227

    Improper Access Control in Apache WSS4J

    Apache WSS4J before 1.6.17 and 2.x before 2.0.2 allows remote attackers to bypass the requireSignedEncryptedDataElements configuration via a vectors related to "wrapping attacks."

    wss4j org.apache.ws.security:wss4j wss4j:wss4j Debian Maven