Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.tomee:tomee-webservices

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
Maven Central

Advisories 2

  • Apache TomEE: Missing authentication on EJB web service endpoints deployed in a web application

    Affected: from 7.0.0-M1, fixed in 10.0.0-M1; from 10.0.0-M1, fixed in 10.3.0; from 11.0.0-M1, fixed in 11.0.0-M2.

  • Apache TomEE: Authentication bypass on EJB web service endpoints via HTTP method

    Affected: from 7.0.0-M1, fixed in 10.0.0-M1; from 10.0.0-M1, fixed in 10.3.0; from 11.0.0-M1, fixed in 11.0.0-M2.