Skip to main content
← Maven

org.apache.openejb:tomee-webservices

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
Maven Central

Advisories 2

  • Apache TomEE: Missing authentication on EJB web service endpoints deployed in a web application

    Affected: from 4.0.0-beta-1, through 4.0.0; from 1.5.0, through 1.7.5.

  • Apache TomEE: Authentication bypass on EJB web service endpoints via HTTP method

    Affected: from 4.0.0-beta-1, through 4.0.0; from 1.5.0, through 1.7.5.