https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:16:11.508936+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-116789 EUVD-2026-116789 2026-10-02T23:16:11.524470+00:00 EUVD-2026-116789 https://cve.radiocsirt.org/vuln/fkie_cve-2011-4314 fkie_cve-2011-4314 2026-10-02T23:16:11.524511+00:00

message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange (AX) information is signed, which allows remote attackers to modify potentially sensitive AX information without detection via a man-in-the-middle (MITM) attack.

 https://cve.radiocsirt.org/vuln/ghsa-j473-c3rr-rx9p GHSA-j473-c3rr-rx9p — OpenID4Java does not verify that Attribute Exchange (AX) information is signed 2026-10-02T23:16:11.524544+00:00

Affected: Maven: org.openid4java:openid4java

message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange (AX) information is signed, which allows remote attackers to modify potentially sensitive AX information without detection via a man-in-the-middle (MITM) attack.

 https://cve.radiocsirt.org/vuln/gsd-2011-4314 gsd-2011-4314 2026-10-02T23:16:11.524570+00:00 gsd-2011-4314 https://cve.radiocsirt.org/vuln/rhsa-2011:1798 RHSA-2011:1798 — Red Hat Security Advisory: JBoss Enterprise Application Platform 5.1.2 update 2026-10-02T23:16:11.524583+00:00

Invoker servlets authentication bypass (HTTP verb tampering) extension): MITM due to improper validation of AX attribute signatures