CVE-2026-97867

Apache TomEE is vulnerable to database credential disclosure via the EJBd remote protocol . A remote client capable of reaching the EJBd endpoint can perform a JNDI lookup to retrieve datasource connection details, including sensitive database credentials. This allows an attacker to connect direc...