Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openid openid4java vulnerabilities and exploits

(subscribe to this query)
5.8
CVSSv2
CVE-2011-4314
message/ax/AxMessage.java in OpenID4Java prior to 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 prior to 5.1.2, Step2, Kay Framework prior to 1.0.2, and possibly other products does not verify that Attribute Exchange (AX) information is signed, which allows re...
Redhat Jboss Enterprise Application Platform 5.1.0Redhat Jboss Enterprise Application Platform 5.1.1Kay Framework Project Kay Framework 0.1.0Kay Framework Project Kay Framework 0.0.0Openid Openid4java 0.9.3Openid Openid4java 0.9.2Kay Framework Project Kay Framework 0.3.0Kay Framework Project Kay Framework 0.2.0Redhat Jboss Enterprise Application Platform 5.1.2Kay Framework Project Kay FrameworkOpenid Openid4javaOpenid Openid4java 0.9.4.339Kay Framework Project Kay Framework 1.0.0Kay Framework Project Kay Framework 0.8.0
6.8
CVSSv2
CVE-2011-4085
The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform prior to 5.1.2, SOA Platform prior to 5.2.0, BRMS Platform prior to 5.3.0, and Portal Platform prior to 4.3 CP07 perform access control only for the GET and POST methods, which allow remote malicious ...
Redhat Jboss Enterprise Application Platform 4.3.0Redhat Jboss Enterprise Application Platform 5.0.1Redhat Jboss Enterprise Application Platform 5.1.0Redhat Jboss Enterprise Application Platform 4.2.0Redhat Jboss Enterprise Application PlatformRedhat Jboss Enterprise Application Platform 5.0.0Redhat Jboss Enterprise Soa Platform 4.3.0Redhat Jboss Enterprise Soa Platform 4.2.0Redhat Jboss Enterprise Soa Platform 5.0.2Redhat Jboss Enterprise Soa Platform 5.0.1Redhat Jboss Enterprise Soa Platform 5.1.0Redhat Jboss Enterprise Soa PlatformRedhat Jboss Enterprise Soa Platform 5.0.0Redhat Jboss Enterprise Brms PlatformRedhat Jboss Enterprise Portal Platform
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook