Skip to content
OpenAdvisories

Product · Spring

Spring Web Services

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-41000

    WSS4J validation does not use configured replay cache

    Wss4jSecurityInterceptor did not consistently wire Apache WSS4J ReplayCache instances into RequestData for validation-time checks. As a result, protections against replay of UsernameToken nonces and creation timestamps, Timestamp elements, and certain SAML on…

    Spring Spring Web Services org.springframework.ws:spring-ws-security Maven