CVE-2014-0035
Cleartext Transmission of Sensitive Information in Apache CXF
4.3 MediumFix available
The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
Exploit likelihood
7.05%Up 0.7 points since Feb 4, 2022
What each source reports
NVD Score used
The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
- Record
CVE-2014-0035- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
- Record
CVE-2014-0035- Updated
- 2026-11-02
EUVDEUVD-2022-5275 No score
The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
- Record
EUVD-2022-5275- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v45r-rj5x-hpg2 No score
Cleartext Transmission of Sensitive Information in Apache CXF
The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
- Record
GHSA-v45r-rj5x-hpg2- Weakness
- CWE-319
- Updated
- 2026-11-02
OSVGHSA-v45r-rj5x-hpg2 No score
Cleartext Transmission of Sensitive Information in Apache CXF
The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
- Record
GHSA-v45r-rj5x-hpg2- Weakness
- CWE-319
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.cxf:cxf-coreMaven |
before 2.6.13 | 2.6.13 |
org.apache.cxf:cxf-coreMaven |
2.7.0 up to 2.7.10 | 2.7.10 |
apache-cxfRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:2.7.11-3.redhat_3.1.ep6.el5 | 0:2.7.11-3.redhat_3.1.ep6.el5 |
hibernate4-core-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 |
hibernate4-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 |
hibernate4-entitymanager-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 |
hibernate4-envers-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 |
hibernate4-infinispan-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 |
jboss-aeshRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:0.33.12-1.redhat_1.1.ep6.el5 | 0:0.33.12-1.redhat_1.1.ep6.el5 |
jboss-as-appclientRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
Show 146 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jboss-as-cliRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-client-allRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-clusteringRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-cmpRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-configadminRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-connectorRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-controllerRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-controller-clientRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-core-securityRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-deployment-repositoryRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-deployment-scannerRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-domain-httpRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-domain-managementRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-eeRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-ee-deploymentRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-ejb3Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-embeddedRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-host-controllerRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jacorbRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jaxrRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jaxrsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jdrRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jmxRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jpaRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jsfRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jsr77Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-loggingRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-mailRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-management-client-contentRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-messagingRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-modclusterRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-namingRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-networkRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-osgiRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-osgi-configadminRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-osgi-serviceRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-platform-mbeanRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-pojoRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-process-controllerRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-protocolRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-remotingRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-sarRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-securityRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-serverRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-system-jmxRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-threadsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-transactionsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-versionRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-webRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-webservicesRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-weldRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-xtsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-security-negotiationRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:2.2.10-1.Final_redhat_1.1.ep6.el5 | 0:2.2.10-1.Final_redhat_1.1.ep6.el5 |
jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:3.0.10-1.GA_redhat_1.1.ep6.el5 | 0:3.0.10-1.GA_redhat_1.1.ep6.el5 |
jbossas-appclientRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-bundlesRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-coreRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-domainRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-javadocsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.ep6.el5 |
jbossas-modules-eapRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-product-eapRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-standaloneRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-welcome-content-eapRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbosstsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 1:4.17.15-5.Final_redhat_5.1.ep6.el5 | 1:4.17.15-5.Final_redhat_5.1.ep6.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.2-1.Final_redhat_1.1.ep6.el5 | 0:7.3.2-1.Final_redhat_1.1.ep6.el5 |
picketboxRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:4.0.19-8.SP8_redhat_1.1.ep6.el5 | 0:4.0.19-8.SP8_redhat_1.1.ep6.el5 |
resteasyRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:2.3.7.2-1.Final_redhat_1.1.ep6.el5 | 0:2.3.7.2-1.Final_redhat_1.1.ep6.el5 |
weld-coreRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:1.1.17-4.SP3_redhat_1.1.ep6.el5 | 0:1.1.17-4.SP3_redhat_1.1.ep6.el5 |
wss4jRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:1.6.15-1.redhat_1.1.ep6.el5 | 0:1.6.15-1.redhat_1.1.ep6.el5 |
apache-cxfRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:2.7.11-3.redhat_3.1.ep6.el6 | 0:2.7.11-3.redhat_3.1.ep6.el6 |
hibernate4-core-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 |
hibernate4-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 |
hibernate4-entitymanager-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 |
hibernate4-envers-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 |
hibernate4-infinispan-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 |
jboss-aeshRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:0.33.12-1.redhat_1.1.ep6.el6 | 0:0.33.12-1.redhat_1.1.ep6.el6 |
jboss-as-appclientRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-cliRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-client-allRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-clusteringRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-cmpRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-configadminRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-connectorRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-controllerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-controller-clientRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-core-securityRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-deployment-repositoryRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-deployment-scannerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-domain-httpRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-domain-managementRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-eeRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-ee-deploymentRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-ejb3Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-embeddedRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-host-controllerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jacorbRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jaxrRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jaxrsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jdrRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jmxRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jpaRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jsfRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jsr77Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-loggingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-mailRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-management-client-contentRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-messagingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-modclusterRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-namingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-networkRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-osgiRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-osgi-configadminRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-osgi-serviceRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-platform-mbeanRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-pojoRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-process-controllerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-protocolRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-remotingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-sarRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-securityRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-serverRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-system-jmxRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-threadsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-transactionsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-versionRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-webRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-webservicesRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-weldRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-xtsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-security-negotiationRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:2.2.10-1.Final_redhat_1.1.ep6.el6 | 0:2.2.10-1.Final_redhat_1.1.ep6.el6 |
jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:3.0.10-1.GA_redhat_1.1.ep6.el6 | 0:3.0.10-1.GA_redhat_1.1.ep6.el6 |
jbossas-appclientRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-bundlesRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-coreRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-domainRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-javadocsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.ep6.el6 |
jbossas-modules-eapRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-product-eapRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-standaloneRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-welcome-content-eapRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbosstsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 1:4.17.15-5.Final_redhat_5.1.ep6.el6 | 1:4.17.15-5.Final_redhat_5.1.ep6.el6 |
jbosswebRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.2-1.Final_redhat_1.1.ep6.el6 | 0:7.3.2-1.Final_redhat_1.1.ep6.el6 |
picketboxRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:4.0.19-8.SP8_redhat_1.1.ep6.el6 | 0:4.0.19-8.SP8_redhat_1.1.ep6.el6 |
resteasyRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:2.3.7.2-1.Final_redhat_1.1.ep6.el6 | 0:2.3.7.2-1.Final_redhat_1.1.ep6.el6 |
weld-coreRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:1.1.17-4.SP3_redhat_1.1.ep6.el6 | 0:1.1.17-4.SP3_redhat_1.1.ep6.el6 |
wss4jRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:1.6.15-1.redhat_1.1.ep6.el6 | 0:1.6.15-1.redhat_1.1.ep6.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-0035 is a medium vulnerability (CVSS 4.3) in Apache Cxf, published July 7, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.05%, the 94th percentile. Fixed in org.apache.cxf:cxf-core 2.6.13.
References
rhn.redhat.com/errata/RHSA-2014-0798.html
cxf.apache.org/security-advisories.data/CVE-2014-0035.txt.asc
Show 68 moreShow less
svn.apache.org/viewvc?view=revision&revision=1564724
lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2014-0035
github.com/apache/cxf/commit/2d2fd1bf67dc2247b6aca31b83a571d865fad1c9
access.redhat.com/errata/RHSA-2014:0798
bugzilla.redhat.com/show_bug.cgi?id=1090473
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0798.json
cve.org/CVERecord?id=CVE-2014-0034