org.apache.cxf:apache-cxf vulnerabilities (Maven)

7 vulnerabilities.

• org.apache.cxf:apache-cxf Maven Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter CVE-2021-30468 Fix available 7.5 HighJune 16, 2021
• org.apache.cxf:apache-cxf Maven OAuth 2 authorization service vulnerable to DDos attacks CVE-2021-22696 Fix available 7.5 HighApril 2, 2021
• org.apache.cxf:apache-cxf Maven Apache CXF Reflected XSS in the services listing page via the styleSheetPath CVE-2020-13954 Fix available EPSS 40.9% 6.1 MediumNovember 12, 2020
• org.apache.cxf:apache-cxf Maven Reflected Cross-Site Scripting in Apache CXF CVE-2019-17573 Public exploitFix available 6.1 MediumJanuary 16, 2020
• org.apache.cxf:apache-cxf Maven Private key leak in Apache CXF CVE-2019-12423 Fix available 7.5 HighJanuary 16, 2020
• org.apache.cxf:apache-cxf Maven Potential DOS attack due to unrestricted attachment count in messages CVE-2019-12406 Fix available 6.5 MediumNovember 6, 2019
• org.apache.cxf:apache-cxf Maven Apache CXF TLS hostname verification does not work correctly with com.sun.net.ssl.* CVE-2018-8039 Public exploitFix available 8.1 HighJuly 2, 2018