Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat JBoss Enterprise Application Platform 8/wss4j-ws-security-dom
Red Hat
· Package
2 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
wss4j: Apache WSS4J: Security policy bypass via encrypted header confusion
CVE-2026-89238
Red Hat JBoss Enterprise Application Platform 7/wss4j-ws-security-dom
Red Hat JBoss Enterprise Application Platform 8/wss4j-ws-security-dom
Red Hat
Medium
No fix reported
Not recorded
org.apache.wss4j/wss4j-ws-security-dom: Apache WSS4J: Authentication bypass via unsigned SAML sender-vouches assertion
CVE-2026-88920
Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk11-openshift-rhel8
Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk17-openshift-rhel8
Red Hat
High
No fix reported
Not recorded
