Skip to content
OpenAdvisories

Product · Apache

WSS4J

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2011-2487

    Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J

    The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.

    Red Hat Apache WSS4J JBossWS Maven