80 matches found
CVE-2026-9319 IBM WebSphere Application Server is affected by a remote code execution vulnerability
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security...
EUVD-2026-33737
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security...
IBM WebSphere Application Server code-related vulnerabilities
IBM WebSphere Application Server is an application server product developed by IBM. It serves as a platform for JavaEE and web services applications and forms the foundation of the IBM WebSphere software suite. Versions 9.0 and 8.5 of IBM WebSphere Application Server contained code vulnerabilitie...
EUVD-2026-13486
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: REST WebServices and Oracle Web Services Manager product of Oracle Fusion Middleware component: Web Services Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable...
EUVD-2009-0888
Malware in sbrugna...
EUVD-2010-0812
Malware in sbrugna...
EUVD-2020-23250
Malware in sbrugna...
EUVD-2011-1384
Malware in sbrugna...
EUVD-2008-4659
Malware in sbrugna...
EUVD-2008-5391
Malware in sbrugna...
EUVD-2008-2545
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2020-13574
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial o...
CVE-2011-3568
Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Services Security...
CVE-2023-37471
Open Access Management OpenAM is an access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements and Web Services Security. OpenAM up to version 14.7.2 does not properly validate the signature of SAML responses received as part of the SAMLv1.x Single Sign-...
Authentication flaw
Open Access Management OpenAM is an access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements and Web Services Security. OpenAM up to version 14.7.2 does not properly validate the signature of SAML responses received as part of the SAMLv1.x Single Sign-...
CVE-2023-37471
OpenAM up to version 14.7.2 is vulnerable to user impersonation due to improper validation of SAML responses in SAMLv1.x SSO. An attacker can impersonate any OpenAM user (including admin) by sending a crafted SAML response to the SAMLPOSTProfileServlet. A fix is available in OpenAM 14.7.3-SNAPSHO...
CVE-2023-37471 User impersonation using SAMLv1.x SSO in Open Access Management
Open Access Management OpenAM is an access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements and Web Services Security. OpenAM up to version 14.7.2 does not properly validate the signature of SAML responses received as part of the SAMLv1.x Single Sign-...
CXF: SSRF Vulnerability
A SSRF vulnerability was found in Apache CXF. This issue occurs when parsing the href attribute of XOP:Include in MTOM requests, allowing an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type...
SUSE CVE-2011-2487
The implementations of PKCS1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack...
net.gplatform:sudoor-server-lib (>=1.0.4 <=1.0.8), no.difi.sdp:sikker-digital-post-java-klient (>=1.0 <=1.2.0.RC1) +60 more potentially affected by CVE-2014-3623 via org.apache.wss4j:wss4j-ws-security-dom (>=2.0.0 <=2.0.10)
org.apache.wss4j:wss4j-ws-security-dom MAVEN version =2.0.0, =1.0.4, =1.0, =0.9, =0.9, =1.1.9 - org.apache.camel:camel-example-reportincident-wssecurity =2.14.0 - org.apache.cxf.fediz.examples.wsclientWebapp.webservice:fedizservice =1.2.4 - org.apache.cxf.fediz.examples.wsclientWebapp:webapp =1.2...