PT-2026-42755

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.1 Apache CXF versions prior to 4.1.6 Apache CXF versions prior to 3.6.11 Description An LDAP injection issue exists in the LDAP Certificate repository of the XKMS server. This allows an attacker to retrieve...

CVE-2026-40459 LDAP Injection in PAC4J

PAC4J is vulnerable to LDAP Injection in multiple methods. A low-privileged remote attacker can inject crafted LDAP syntax into ID-based search parameters, potentially resulting in unauthorized LDAP queries and arbitrary directory operations. This issue was fixed in PAC4J versions 4.5.10, 5.7.10...

Telos Automated Message Handling System Cross-Site Scripting Vulnerability (CNVD-2020-04116)

Telos Automated Message Handling System AMHS is an automated message handling system that enables automated Web-based distribution and management of enterprise-wide organizational messages. A cross-site scripting vulnerability exists in the LDAP cbURL parameter in Telos Automated Message Handling...