20de2e
@@ -643,7 +643,7 @@
public class Wss4jSecurityInterceptor extends AbstractWsSecurityInterceptor impl
 			logger.debug("Validating message [" + soapMessage + "] with actions [" + validationActions + "]");
 		}
 
-		if (validationActionsVector.contains(WSConstants.NO_SECURITY)) {
+		if (CollectionUtils.isEmpty(validationActionsVector) || validationActionsVector.contains(WSConstants.NO_SECURITY)) {
 			return;
 		}
 
