CVE-2014-0109
Uncontrolled Resource Consumption in Apache CXF
4.3 MediumFix available
Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error.
Exploit likelihood
3.64%Down 0.1 points since Feb 4, 2022
What each source reports
NVD Score used
Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error.
- Record
CVE-2014-0109- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error.
- Record
CVE-2014-0109- Updated
- 2026-11-02
EUVDEUVD-2022-2671 No score
Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error.
- Record
EUVD-2022-2671- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5wqf-h3r3-gxvh No score
Uncontrolled Resource Consumption in Apache CXF
Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error.
- Record
GHSA-5wqf-h3r3-gxvh- Weakness
- CWE-400
- Updated
- 2026-11-02
OSVGHSA-5wqf-h3r3-gxvh No score
Uncontrolled Resource Consumption in Apache CXF
Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error.
- Record
GHSA-5wqf-h3r3-gxvh- Weakness
- CWE-400
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.cxf:cxf-coreMaven |
before 2.6.14 | 2.6.14 |
org.apache.cxf:cxf-coreMaven |
2.7.0 up to 2.7.11 | 2.7.11 |
apache-cxfRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:2.7.11-3.redhat_3.1.ep6.el5 | 0:2.7.11-3.redhat_3.1.ep6.el5 |
hibernate4-core-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 |
hibernate4-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 |
hibernate4-entitymanager-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 |
hibernate4-envers-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 |
hibernate4-infinispan-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 |
jboss-aeshRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:0.33.12-1.redhat_1.1.ep6.el5 | 0:0.33.12-1.redhat_1.1.ep6.el5 |
jboss-as-appclientRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
Show 146 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jboss-as-cliRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-client-allRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-clusteringRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-cmpRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-configadminRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-connectorRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-controllerRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-controller-clientRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-core-securityRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-deployment-repositoryRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-deployment-scannerRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-domain-httpRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-domain-managementRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-eeRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-ee-deploymentRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-ejb3Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-embeddedRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-host-controllerRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jacorbRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jaxrRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jaxrsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jdrRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jmxRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jpaRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jsfRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jsr77Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-loggingRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-mailRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-management-client-contentRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-messagingRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-modclusterRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-namingRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-networkRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-osgiRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-osgi-configadminRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-osgi-serviceRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-platform-mbeanRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-pojoRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-process-controllerRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-protocolRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-remotingRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-sarRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-securityRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-serverRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-system-jmxRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-threadsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-transactionsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-versionRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-webRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-webservicesRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-weldRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-xtsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-security-negotiationRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:2.2.10-1.Final_redhat_1.1.ep6.el5 | 0:2.2.10-1.Final_redhat_1.1.ep6.el5 |
jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:3.0.10-1.GA_redhat_1.1.ep6.el5 | 0:3.0.10-1.GA_redhat_1.1.ep6.el5 |
jbossas-appclientRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-bundlesRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-coreRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-domainRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-javadocsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.ep6.el5 |
jbossas-modules-eapRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-product-eapRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-standaloneRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-welcome-content-eapRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbosstsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 1:4.17.15-5.Final_redhat_5.1.ep6.el5 | 1:4.17.15-5.Final_redhat_5.1.ep6.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.2-1.Final_redhat_1.1.ep6.el5 | 0:7.3.2-1.Final_redhat_1.1.ep6.el5 |
picketboxRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:4.0.19-8.SP8_redhat_1.1.ep6.el5 | 0:4.0.19-8.SP8_redhat_1.1.ep6.el5 |
resteasyRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:2.3.7.2-1.Final_redhat_1.1.ep6.el5 | 0:2.3.7.2-1.Final_redhat_1.1.ep6.el5 |
weld-coreRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:1.1.17-4.SP3_redhat_1.1.ep6.el5 | 0:1.1.17-4.SP3_redhat_1.1.ep6.el5 |
wss4jRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:1.6.15-1.redhat_1.1.ep6.el5 | 0:1.6.15-1.redhat_1.1.ep6.el5 |
apache-cxfRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:2.7.11-3.redhat_3.1.ep6.el6 | 0:2.7.11-3.redhat_3.1.ep6.el6 |
hibernate4-core-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 |
hibernate4-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 |
hibernate4-entitymanager-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 |
hibernate4-envers-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 |
hibernate4-infinispan-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 |
jboss-aeshRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:0.33.12-1.redhat_1.1.ep6.el6 | 0:0.33.12-1.redhat_1.1.ep6.el6 |
jboss-as-appclientRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-cliRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-client-allRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-clusteringRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-cmpRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-configadminRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-connectorRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-controllerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-controller-clientRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-core-securityRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-deployment-repositoryRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-deployment-scannerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-domain-httpRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-domain-managementRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-eeRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-ee-deploymentRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-ejb3Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-embeddedRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-host-controllerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jacorbRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jaxrRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jaxrsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jdrRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jmxRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jpaRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jsfRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jsr77Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-loggingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-mailRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-management-client-contentRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-messagingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-modclusterRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-namingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-networkRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-osgiRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-osgi-configadminRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-osgi-serviceRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-platform-mbeanRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-pojoRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-process-controllerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-protocolRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-remotingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-sarRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-securityRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-serverRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-system-jmxRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-threadsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-transactionsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-versionRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-webRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-webservicesRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-weldRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-xtsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-security-negotiationRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:2.2.10-1.Final_redhat_1.1.ep6.el6 | 0:2.2.10-1.Final_redhat_1.1.ep6.el6 |
jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:3.0.10-1.GA_redhat_1.1.ep6.el6 | 0:3.0.10-1.GA_redhat_1.1.ep6.el6 |
jbossas-appclientRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-bundlesRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-coreRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-domainRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-javadocsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.ep6.el6 |
jbossas-modules-eapRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-product-eapRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-standaloneRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-welcome-content-eapRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbosstsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 1:4.17.15-5.Final_redhat_5.1.ep6.el6 | 1:4.17.15-5.Final_redhat_5.1.ep6.el6 |
jbosswebRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.2-1.Final_redhat_1.1.ep6.el6 | 0:7.3.2-1.Final_redhat_1.1.ep6.el6 |
picketboxRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:4.0.19-8.SP8_redhat_1.1.ep6.el6 | 0:4.0.19-8.SP8_redhat_1.1.ep6.el6 |
resteasyRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:2.3.7.2-1.Final_redhat_1.1.ep6.el6 | 0:2.3.7.2-1.Final_redhat_1.1.ep6.el6 |
weld-coreRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:1.1.17-4.SP3_redhat_1.1.ep6.el6 | 0:1.1.17-4.SP3_redhat_1.1.ep6.el6 |
wss4jRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:1.6.15-1.redhat_1.1.ep6.el6 | 0:1.6.15-1.redhat_1.1.ep6.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-0109 is a medium vulnerability (CVSS 4.3) in Apache Cxf, published May 8, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.64%, the 89th percentile. Fixed in org.apache.cxf:cxf-core 2.6.14.
References
rhn.redhat.com/errata/RHSA-2015-0850.html
cxf.apache.org/security-advisories.data/CVE-2014-0109.txt.asc?version=1&modificationDate=1398873370740&api=v2
securitytracker.com/id/1030201
lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E
Show 66 moreShow less
nvd.nist.gov/vuln/detail/CVE-2014-0109
github.com/apache/cxf/commit/6dd839afbb4d834ed668738bd89e7775c1cf2f9d
access.redhat.com/errata/RHSA-2014:0798
bugzilla.redhat.com/show_bug.cgi?id=1090473
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0798.json
cve.org/CVERecord?id=CVE-2014-0034