CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-2487

The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 35.4%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 4.3

References

Products affected by CVE-2011-2487

Apache » Cxf » Version: 2.4.0

cpe:2.3:a:apache:cxf:2.4.0
Apache » Cxf » Version: 2.4.1

cpe:2.3:a:apache:cxf:2.4.1
Apache » Cxf » Version: 2.4.2

cpe:2.3:a:apache:cxf:2.4.2
Apache » Cxf » Version: 2.4.3

cpe:2.3:a:apache:cxf:2.4.3
Apache » Cxf » Version: 2.4.4

cpe:2.3:a:apache:cxf:2.4.4
Apache » Cxf » Version: 2.4.5

cpe:2.3:a:apache:cxf:2.4.5
Apache » Cxf » Version: 2.4.6

cpe:2.3:a:apache:cxf:2.4.6
Apache » Cxf » Version: 2.5.0

cpe:2.3:a:apache:cxf:2.5.0
Apache » Cxf » Version: 2.5.1

cpe:2.3:a:apache:cxf:2.5.1
Apache » Cxf » Version: 2.5.2

cpe:2.3:a:apache:cxf:2.5.2
Apache » Wss4j » Version: 1.0.0

cpe:2.3:a:apache:wss4j:1.0.0
Apache » Wss4j » Version: 1.1.0

cpe:2.3:a:apache:wss4j:1.1.0
Apache » Wss4j » Version: 1.5.0

cpe:2.3:a:apache:wss4j:1.5.0
Apache » Wss4j » Version: 1.5.1

cpe:2.3:a:apache:wss4j:1.5.1
Apache » Wss4j » Version: 1.5.10

cpe:2.3:a:apache:wss4j:1.5.10
Apache » Wss4j » Version: 1.5.11

cpe:2.3:a:apache:wss4j:1.5.11
Apache » Wss4j » Version: 1.5.12

cpe:2.3:a:apache:wss4j:1.5.12
Apache » Wss4j » Version: 1.5.2

cpe:2.3:a:apache:wss4j:1.5.2
Apache » Wss4j » Version: 1.5.3

cpe:2.3:a:apache:wss4j:1.5.3
Apache » Wss4j » Version: 1.5.4

cpe:2.3:a:apache:wss4j:1.5.4
Apache » Wss4j » Version: 1.5.5

cpe:2.3:a:apache:wss4j:1.5.5
Apache » Wss4j » Version: 1.5.6

cpe:2.3:a:apache:wss4j:1.5.6
Apache » Wss4j » Version: 1.5.7

cpe:2.3:a:apache:wss4j:1.5.7
Apache » Wss4j » Version: 1.5.8

cpe:2.3:a:apache:wss4j:1.5.8
Apache » Wss4j » Version: 1.5.9

cpe:2.3:a:apache:wss4j:1.5.9
Apache » Wss4j » Version: 1.6.0

cpe:2.3:a:apache:wss4j:1.6.0
Apache » Wss4j » Version: 1.6.1

cpe:2.3:a:apache:wss4j:1.6.1
Apache » Wss4j » Version: 1.6.2

cpe:2.3:a:apache:wss4j:1.6.2
Apache » Wss4j » Version: 1.6.3

cpe:2.3:a:apache:wss4j:1.6.3
Apache » Wss4j » Version: 1.6.4

cpe:2.3:a:apache:wss4j:1.6.4
Redhat » Jboss Business Rules Management System » Version: 5.3

cpe:2.3:a:redhat:jboss_business_rules_management_system:5.3
Redhat » Jboss Enterprise Application Platform » Version: 5.0.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0
Redhat » Jboss Enterprise Application Platform Text-Only Advisories » Version: N/A

cpe:2.3:a:redhat:jboss_enterprise_application_platform_text-only_advisories:-
Redhat » Jboss Enterprise Soa Platform » Version: 4.2.0

cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.2.0
Redhat » Jboss Enterprise Soa Platform » Version: 4.3.0

cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.3.0
Redhat » Jboss Enterprise Web Platform » Version: 5.0.0

cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.0.0
Redhat » Jboss Middleware Text-Only Advisories » Version: N/A

cpe:2.3:a:redhat:jboss_middleware_text-only_advisories:-
Redhat » Jboss Portal » Version: 4.0.0

cpe:2.3:a:redhat:jboss_portal:4.0.0
Redhat » Jboss Web Services » Version: N/A

cpe:2.3:a:redhat:jboss_web_services:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-2487

Products

Pricing

Contact Us