Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Apache WSS4J — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Apache WSS4J, with AI-generated Chinese analysis, references, and POCs.

Vendor: Apache Software Foundation

CVE ID Title CVSS Severity Published
CVE-2026-95616 Apache WSS4J: Unauthenticated denial of service via integer overflow in DER parsing of X.509 certificate extensions - - 2026-09-30
CVE-2026-92899 Apache WSS4J: UsernameToken replay protection bypassed by re-encoding the Nonce - - 2026-09-30
CVE-2026-92121 Apache WSS4J: WS-SecurityPolicy signature checks skipped in the streaming code after an STR-Transform reference - - 2026-09-30
CVE-2026-89238 Apache WSS4J: WSS4J EncryptedHeader child confusion causing wrong protected-header selection - - 2026-09-30
CVE-2026-88920 Apache WSS4J: SAML Sender-Vouches Authentication Bypass - - 2026-09-30
CVE-2026-87830 Apache WSS4J: Streaming WS-SecurityPolicy validation may skip element-protection checks. - - 2026-09-30
CVE-2026-85532 Apache WSS4J: Insufficient Validation of Derived-Key Parameters CWE-20 - - 2026-09-30

All 7 known CVE vulnerabilities affecting Apache WSS4J with full Chinese analysis, references, and POCs where available.