CVE-2014-0034
Improper Input Validation in Apache CXF
4.3 MediumFix available
The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.
Exploit likelihood
7.41%Up 1.0 points since Feb 4, 2022
What each source reports
NVD Score used
The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.
- Record
CVE-2014-0034- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.
- Record
CVE-2014-0034- Updated
- 2026-11-02
EUVDEUVD-2022-2143 No score
The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.
- Record
EUVD-2022-2143- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-38x2-fp9m-87mx No score
Improper Input Validation in Apache CXF
The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.
- Record
GHSA-38x2-fp9m-87mx- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVGHSA-38x2-fp9m-87mx No score
Improper Input Validation in Apache CXF
The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.
- Record
GHSA-38x2-fp9m-87mx- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.cxf:cxf-rt-ws-securityMaven |
before 2.6.12 | 2.6.12 |
org.apache.cxf:cxf-rt-ws-securityMaven |
2.7.0 up to 2.7.9 | 2.7.9 |
org.apache.cxf:cxf-rt-ws-securityMaven |
before 2.6.12, plus listed versions 2.0.102.0.112.0.122.0.132.0.6 Show 45 moreShow less2.0.72.0.82.0.92.12.1.12.1.102.1.22.1.32.1.42.1.52.1.62.1.72.1.82.1.92.22.2.12.2.102.2.112.2.122.2.22.2.32.2.42.2.52.2.62.2.72.2.82.2.92.3.02.3.12.3.102.3.112.3.22.3.32.3.42.3.52.3.62.3.72.3.82.3.92.4.02.4.12.4.102.4.22.4.32.4.4 |
2.6.12 |
org.apache.cxf:cxf-rt-ws-securityMaven |
2.7.0 up to 2.7.9, plus listed versions 2.7.12.7.22.7.32.7.42.7.52.7.62.7.72.7.8 |
2.7.9 |
apache-cxfRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:2.7.11-3.redhat_3.1.ep6.el5 | 0:2.7.11-3.redhat_3.1.ep6.el5 |
hibernate4-core-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 |
hibernate4-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 |
hibernate4-entitymanager-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 |
hibernate4-envers-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 |
hibernate4-infinispan-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el5 |
Show 148 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jboss-aeshRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:0.33.12-1.redhat_1.1.ep6.el5 | 0:0.33.12-1.redhat_1.1.ep6.el5 |
jboss-as-appclientRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-cliRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-client-allRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-clusteringRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-cmpRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-configadminRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-connectorRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-controllerRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-controller-clientRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-core-securityRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-deployment-repositoryRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-deployment-scannerRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-domain-httpRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-domain-managementRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-eeRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-ee-deploymentRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-ejb3Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-embeddedRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-host-controllerRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jacorbRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jaxrRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jaxrsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jdrRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jmxRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jpaRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jsfRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jsr77Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-loggingRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-mailRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-management-client-contentRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-messagingRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-modclusterRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-namingRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-networkRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-osgiRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-osgi-configadminRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-osgi-serviceRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-platform-mbeanRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-pojoRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-process-controllerRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-protocolRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-remotingRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-sarRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-securityRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-serverRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-system-jmxRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-threadsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-transactionsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-versionRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-webRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-webservicesRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-weldRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-as-xtsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jboss-security-negotiationRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:2.2.10-1.Final_redhat_1.1.ep6.el5 | 0:2.2.10-1.Final_redhat_1.1.ep6.el5 |
jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:3.0.10-1.GA_redhat_1.1.ep6.el5 | 0:3.0.10-1.GA_redhat_1.1.ep6.el5 |
jbossas-appclientRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-bundlesRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-coreRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-domainRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-javadocsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.ep6.el5 |
jbossas-modules-eapRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-product-eapRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-standaloneRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbossas-welcome-content-eapRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el5 | 0:7.3.4-1.Final_redhat_1.1.ep6.el5 |
jbosstsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 1:4.17.15-5.Final_redhat_5.1.ep6.el5 | 1:4.17.15-5.Final_redhat_5.1.ep6.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:7.3.2-1.Final_redhat_1.1.ep6.el5 | 0:7.3.2-1.Final_redhat_1.1.ep6.el5 |
picketboxRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:4.0.19-8.SP8_redhat_1.1.ep6.el5 | 0:4.0.19-8.SP8_redhat_1.1.ep6.el5 |
resteasyRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:2.3.7.2-1.Final_redhat_1.1.ep6.el5 | 0:2.3.7.2-1.Final_redhat_1.1.ep6.el5 |
weld-coreRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:1.1.17-4.SP3_redhat_1.1.ep6.el5 | 0:1.1.17-4.SP3_redhat_1.1.ep6.el5 |
wss4jRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 5 CVEs |
before 0:1.6.15-1.redhat_1.1.ep6.el5 | 0:1.6.15-1.redhat_1.1.ep6.el5 |
apache-cxfRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:2.7.11-3.redhat_3.1.ep6.el6 | 0:2.7.11-3.redhat_3.1.ep6.el6 |
hibernate4-core-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 |
hibernate4-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 |
hibernate4-entitymanager-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 |
hibernate4-envers-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 |
hibernate4-infinispan-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 | 0:4.2.7-9.SP5_redhat_1.1.ep6.el6 |
jboss-aeshRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:0.33.12-1.redhat_1.1.ep6.el6 | 0:0.33.12-1.redhat_1.1.ep6.el6 |
jboss-as-appclientRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-cliRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-client-allRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-clusteringRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-cmpRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-configadminRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-connectorRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-controllerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-controller-clientRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-core-securityRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-deployment-repositoryRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-deployment-scannerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-domain-httpRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-domain-managementRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-eeRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-ee-deploymentRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-ejb3Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-embeddedRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-host-controllerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jacorbRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jaxrRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jaxrsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jdrRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jmxRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jpaRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jsfRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jsr77Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-loggingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-mailRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-management-client-contentRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-messagingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-modclusterRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-namingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-networkRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-osgiRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-osgi-configadminRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-osgi-serviceRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-platform-mbeanRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-pojoRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-process-controllerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-protocolRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-remotingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-sarRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-securityRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-serverRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-system-jmxRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-threadsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-transactionsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-versionRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-webRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-webservicesRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-weldRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-as-xtsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jboss-security-negotiationRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:2.2.10-1.Final_redhat_1.1.ep6.el6 | 0:2.2.10-1.Final_redhat_1.1.ep6.el6 |
jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:3.0.10-1.GA_redhat_1.1.ep6.el6 | 0:3.0.10-1.GA_redhat_1.1.ep6.el6 |
jbossas-appclientRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-bundlesRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-coreRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-domainRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-javadocsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.ep6.el6 |
jbossas-modules-eapRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-product-eapRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-standaloneRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbossas-welcome-content-eapRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.4-1.Final_redhat_1.1.ep6.el6 | 0:7.3.4-1.Final_redhat_1.1.ep6.el6 |
jbosstsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 1:4.17.15-5.Final_redhat_5.1.ep6.el6 | 1:4.17.15-5.Final_redhat_5.1.ep6.el6 |
jbosswebRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:7.3.2-1.Final_redhat_1.1.ep6.el6 | 0:7.3.2-1.Final_redhat_1.1.ep6.el6 |
picketboxRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:4.0.19-8.SP8_redhat_1.1.ep6.el6 | 0:4.0.19-8.SP8_redhat_1.1.ep6.el6 |
resteasyRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:2.3.7.2-1.Final_redhat_1.1.ep6.el6 | 0:2.3.7.2-1.Final_redhat_1.1.ep6.el6 |
weld-coreRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:1.1.17-4.SP3_redhat_1.1.ep6.el6 | 0:1.1.17-4.SP3_redhat_1.1.ep6.el6 |
wss4jRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 5 CVEs |
before 0:1.6.15-1.redhat_1.1.ep6.el6 | 0:1.6.15-1.redhat_1.1.ep6.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-0034 is a medium vulnerability (CVSS 4.3) in Apache Cxf, published July 7, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.41%, the 94th percentile. Fixed in org.apache.cxf:cxf-rt-ws-security 2.6.12.
References
rhn.redhat.com/errata/RHSA-2014-0798.html
cxf.apache.org/security-advisories.data/CVE-2014-0034.txt.asc
securityfocus.com/bid/68441
svn.apache.org/viewvc?view=revision&revision=1551228
Show 68 moreShow less
lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2014-0034
github.com/apache/cxf/commit/b4b9a010bb23059251400455afabddee15b46127
access.redhat.com/errata/RHSA-2014:0798
bugzilla.redhat.com/show_bug.cgi?id=1090473
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0798.json
cve.org/CVERecord?id=CVE-2014-0034
This page doesn't list everything
Left out here: 29 versions. The JSON record has them.