← All credits
Markus Jung
23 vulnerability records and advisories credit this contributor.
CVE-2026-86531
Apache TomEE: DoS via unbounded request body and multipart handling in embedded HTTP server
CVE-2026-86336
Apache TomEE: EJB method authorization is silently skipped on JDK 21+
CVE-2026-111261
Apache TomEE: Authentication bypass with empty password in LDAP identity store
CVE-2026-111260
Apache TomEE: Predictable OpenID Connect state and nonce values
CVE-2026-111259
Apache TomEE: Predictable HTTP session identifiers in embedded server
CVE-2026-111258
Apache TomEE: Security constraint bypass via request routing
CVE-2026-111257
Apache TomEE: Well-known administrative credentials created at startup
CVE-2026-111256
Apache TomEE: Missing authentication for web service endpoints in embedded HTTP server
CVE-2026-87756
Apache TomEE: Missing authorization on internal deployer EJBs in default profile
CVE-2026-87755
Apache TomEE: Stateful session bean hijacking via predictable session identifiers