WS
Product
Wss4j
12
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 3High 5Medium 2Low 0
Watch
Add Wss4j to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-2487 | 5.9 | Mar 11 | The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack Affected: before 1.6.5 |
| CVE-2026-92899 | 4.8 | Sep 30 | Apache WSS4J: UsernameToken replay protection bypassed by re-encoding the Nonce Affected: before 2.4.4; 3.0.0 before 3.0.6; 4.0.0 before 4.0.2 |
Showing 2