8 matches found
CVE-2026-97867
The EJBd remote protocol returns datasource connection details, including database credentials, to remote clients that look up a datasource. A remote client able to reach the EJBd endpoint can obtain the database credentials and connect to the database directly. Users are recommended to upgrade t...
CVE-2026-97867
Apache TomEE is vulnerable to database credential disclosure via the EJBd remote protocol . A remote client capable of reaching the EJBd endpoint can perform a JNDI lookup to retrieve datasource connection details, including sensitive database credentials. This allows an attacker to connect direc...
CVE-2026-97867 Apache TomEE: Database credential disclosure via remote JNDI lookup
The EJBd remote protocol returns datasource connection details, including database credentials, to remote clients that look up a datasource. A remote client able to reach the EJBd endpoint can obtain the database credentials and connect to the database directly. Users are recommended to upgrade t...
EUVD-2026-121160
The EJBd remote protocol returns datasource connection details, including database credentials, to remote clients that look up a datasource. A remote client able to reach the EJBd endpoint can obtain the database credentials and connect to the database directly. Users are recommended to upgrade t...
CVE-2026-97867: Apache Software Foundation Apache TomEE: The EJBd remote protocol returns datasource connection details, including database credentials, to remote clients that…
The EJBd remote protocol returns datasource connection details, including database credentials, to remote clients that look up a datasource. A remote client able to reach the EJBd endpoint can obtain the database credentials and connect to the database directly. Users are recommended to upgrade t...
PT-2026-141786
The EJBd remote protocol returns datasource connection details, including database credentials, to remote clients that look up a datasource. A remote client able to reach the EJBd endpoint can obtain the database credentials and connect to the database directly. Users are recommended to upgrade t...
Apache TomEE RCE Vulnerability
Apache TomEE is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomee"...
