CVE-2012-0803

Improper Authentication in Apache CXF

9.8 CriticalFix available

CVE-2012-0803 is a critical vulnerability (CVSS 9.8) in Apache Cxf, published August 8, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.54%, the 89th percentile. Fixed in org.apache.cxf:cxf 2.4.6.

The WS-SP UsernameToken policy in Apache CXF 2.4.5 and 2.5.1 allows remote attackers to bypass authentication by sending an empty UsernameToken as part of a SOAP request.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

3.54%Down 0.1 points since Jun 1, 2023

What each source reports

NVD Score used 9.8

The WS-SP UsernameToken policy in Apache CXF 2.4.5 and 2.5.1 allows remote attackers to bypass authentication by sending an empty UsernameToken as part of a SOAP request.

Record: CVE-2012-0803
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-287
Updated: 2026-11-02

CVE List No score

The WS-SP UsernameToken policy in Apache CXF 2.4.5 and 2.5.1 allows remote attackers to bypass authentication by sending an empty UsernameToken as part of a SOAP request.

Record: CVE-2012-0803
Updated: 2026-11-02

EUVDEUVD-2022-2021 No score

The WS-SP UsernameToken policy in Apache CXF 2.4.5 and 2.5.1 allows remote attackers to bypass authentication by sending an empty UsernameToken as part of a SOAP request.

Record: EUVD-2022-2021
Updated: 2026-11-03

GitHub AdvisoriesGHSA-2p7x-jcr3-7p2c 9.8

Improper Authentication in Apache CXF

The WS-SP UsernameToken policy in Apache CXF 2.4.5 and 2.5.1 allows remote attackers to bypass authentication by sending an empty UsernameToken as part of a SOAP request.

Record: GHSA-2p7x-jcr3-7p2c
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-287
Updated: 2026-11-02

OSVGHSA-2p7x-jcr3-7p2c 9.8

Improper Authentication in Apache CXF

The WS-SP UsernameToken policy in Apache CXF 2.4.5 and 2.5.1 allows remote attackers to bypass authentication by sending an empty UsernameToken as part of a SOAP request.

Record: GHSA-2p7x-jcr3-7p2c
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-287
Updated: 2026-11-02

Affected products

apache cxf

Affected packages

Affected packages
Package	Affected	Fixed
`org.apache.cxf:cxf` Maven	2.4.0 to 2.4.5	2.4.6
`org.apache.cxf:cxf` Maven	2.5.0 to 2.5.1	2.5.2
`org.apache.cxf:cxf` Maven	2.4.0 up to 2.4.6, plus listed versions 2.4.12.4.22.4.32.4.42.4.5	2.4.6
`org.apache.cxf:cxf` Maven	2.5.0 up to 2.5.2, plus listed versions 2.5.1	2.5.2

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 11 moreShow less