Skip to content
OpenAdvisories

Vendor

med-united

2 known vulnerabilities.

Products

epa4all 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-54342

    TLS Certificate Verification Disabled on CXF Transport Clients in epa4all

    In epa4all, prior to version 2026-05-20, an attacker on the network path between epa4all and any backend (ePA Aktensystem, Konnektor, IDP, TSS) can present a self-signed TLS certificate and intercept the connection. For non-VAU connections (Konnektor, IDP), t…

    med-united epa4all