Product by Apache Software Foundation

    Apache Wss4j

    7 known vulnerabilities in Apache Wss4j (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Apache Wss4j (Apache Software Foundation)
    CriticalCVE-2026-88920

    Apache WSS4J: SAML Sender-Vouches Authentication Bypass

    also in 1 other product

    		9.8
    HighCVE-2026-85532

    Apache WSS4J: Insufficient Validation of Derived-Key Parameters

    also in 1 other product

    		7.5
    HighCVE-2026-92121

    Apache WSS4J: security vulnerability

    also in 1 other product

    		7.5
    CriticalCVE-2026-89238

    Apache WSS4J: WSS4J EncryptedHeader child confusion causing wrong protected-header selection

    also in 1 other product

    		9.1
    HighCVE-2026-95616

    Apache WSS4J: Integer Overflow

    also in 1 other product

    		7.5
    CriticalCVE-2026-87830

    Apache WSS4J: security vulnerability

    also in 1 other product

    		9.1
    MediumCVE-2026-92899

    Apache WSS4J: UsernameToken replay protection bypassed by re-encoding the Nonce

    also in 1 other product

    		4.8

    All products by Apache Software Foundation