CVE record · 1 source
CVE-2026-97872
When an EJB is exposed over the optional Hessian protocol inside an existing web application, some configured authentication and transport security…
- Vendor
- Apache Software Foundation
- Product
- Apache TomEE
- Weakness
- CWE-306
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
When an EJB is exposed over the optional Hessian protocol inside an existing web application, some configured authentication and transport security…
When an EJB is exposed over the optional Hessian protocol inside an existing web application, some configured authentication and transport security settings are silently not enforced. A remote unauthenticated attacker can invoke…