Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.tomee:openejb-cxf

1 known vulnerability, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
1
Registry
Maven Central

Advisories 1

  • Apache TomEE: Privilege escalation via WS-Security caller identity leaking between requests

    Affected: from 7.0.0-M1, fixed in 10.0.0-M1; from 10.0.0-M1, fixed in 10.3.0; from 11.0.0-M1, fixed in 11.0.0-M2.