org.apache.cxf:cxf vulnerabilities (Maven)

12 vulnerabilities.

• org.apache.cxf:cxf Maven Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter CVE-2021-30468 Fix available 7.5 HighJune 16, 2021
• org.apache.cxf:cxf Maven OAuth 2 authorization service vulnerable to DDos attacks CVE-2021-22696 Fix available 7.5 HighApril 2, 2021
• org.apache.cxf:cxf Maven Apache CXF Reflected XSS in the services listing page via the styleSheetPath CVE-2020-13954 Fix available EPSS 40.9% 6.1 MediumNovember 12, 2020
• org.apache.cxf:cxf Maven Reflected Cross-Site Scripting in Apache CXF CVE-2019-17573 Public exploitFix available 6.1 MediumJanuary 16, 2020
• org.apache.cxf:cxf Maven Private key leak in Apache CXF CVE-2019-12423 Fix available 7.5 HighJanuary 16, 2020
• org.apache.cxf:cxf Maven Potential session hijack in Apache CXF CVE-2019-12419 Fix available EPSS 13.8% 9.8 CriticalNovember 6, 2019
• org.apache.cxf:cxf Maven Potential DOS attack due to unrestricted attachment count in messages CVE-2019-12406 Fix available 6.5 MediumNovember 6, 2019
• org.apache.cxf:cxf Maven Improper Authentication in Apache CXF CVE-2012-0803 Fix available 9.8 CriticalAugust 8, 2017
• org.apache.cxf:cxf Maven Improper Authentication in Apache CXF CVE-2012-5633 Fix available 5.8 MediumMarch 12, 2013
• org.apache.cxf:cxf Maven Improper Authentication in Apache CXF CVE-2012-2378 Fix available 4.3 MediumJanuary 5, 2013
• org.apache.cxf:cxf Maven XML Signature/Encryption Not Validated in Apache CXF CVE-2012-2379 Fix available 10.0 HighJanuary 3, 2013
• org.apache.cxf:cxf Maven Remote web-service operation execution in Apache CXF CVE-2012-3451 Fix available 4.3 MediumSeptember 24, 2012