apache-cxf vulnerabilities (Red Hat)

79 vulnerabilities.

• apache-cxf Red Hat Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J CVE-2011-2487 Fix available 5.9 MediumMarch 11, 2020
• apache-cxf Red Hat JBossWeb Bayeux has reflected XSS CVE-2013-6495 6.1 MediumDecember 11, 2019
• apache-cxf Red Hat A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions... CVE-2018-10934 5.4 MediumMarch 27, 2019
• apache-cxf Red Hat An information disclosure vulnerability was found in JBoss Enterprise Application Platform before... CVE-2016-7061 3.5 LowSeptember 10, 2018
• apache-cxf Red Hat Dom4j contains a XML Injection vulnerability CVE-2018-1000632 Fix available 7.5 HighAugust 20, 2018
• apache-cxf Red Hat It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect... CVE-2016-8657 7.8 HighJuly 31, 2018
• apache-cxf Red Hat The host name verification missing in Apache Tomcat CVE-2018-8034 Fix available EPSS 21.0% 7.5 HighJuly 24, 2018
• apache-cxf Red Hat Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in... CVE-2016-8656 7.0 HighMay 22, 2018
• apache-cxf Red Hat admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download... CVE-2016-8627 4.3 MediumMay 11, 2018
• apache-cxf Red Hat jackson-databind is vulnerable to a deserialization flaw CVE-2017-7525 Public exploitFix available EPSS 37.7% 9.8 CriticalAugust 11, 2017
• apache-cxf Red Hat Improper Handling of Exceptional Conditions in Apache Tomcat CVE-2017-5664 Fix available EPSS 16.6% 7.5 HighJune 6, 2017
• apache-cxf Red Hat Deserialization of Untrusted Data in Log4j CVE-2017-5645 Public exploitFix available EPSS 89.4% 9.8 CriticalApril 17, 2017
• apache-cxf Red Hat It was discovered that a programming error in the processing of HTTPS requests in the Apache... CVE-2017-6056 Fix available 7.5 HighFebruary 13, 2017
• apache-cxf Red Hat Improper Input Validation in Apache Tomcat CVE-2016-6816 Public exploitFix available EPSS 39.6% 7.1 HighNovember 23, 2016
• apache-cxf Red Hat Denial of service in JBoss resteasy CVE-2016-6346 Fix available 7.5 HighSeptember 7, 2016
• apache-cxf Red Hat Improper Input Validation in JGroups CVE-2016-2141 Fix available 9.8 CriticalJune 30, 2016
• apache-cxf Red Hat High severity vulnerability that affects commons-fileupload:commons-fileupload CVE-2016-3092 Fix available EPSS 37.2% 7.5 HighJune 23, 2016
• apache-cxf Red Hat Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat CVE-2015-5174 Fix available EPSS 12.6% 4.3 MediumFebruary 24, 2016
• apache-cxf Red Hat The Web Console in Red Hat Enterprise Application Platform (EAP) before 6.4.4 and WildFly ... CVE-2015-5220 5.0 MediumOctober 27, 2015
• apache-cxf Red Hat Cross-site request forgery (CSRF) vulnerability in the Web Console (web-console) in Red Hat... CVE-2015-5188 6.8 MediumOctober 27, 2015
• apache-cxf Red Hat The Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly ... CVE-2015-5178 4.3 MediumOctober 27, 2015
• apache-cxf Red Hat XXE in Apache Standard Taglibs CVE-2015-0254 Fix available EPSS 12.0% 7.5 HighMarch 9, 2015
• apache-cxf Red Hat PicketBox and JBossSX, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2 and... CVE-2014-0005 3.6 LowFebruary 20, 2015
• apache-cxf Red Hat Information disclosure in JBoss Weld CVE-2014-8122 Fix available 4.3 MediumFebruary 13, 2015
• apache-cxf Red Hat The JBoss Application Server (WildFly) JacORB subsystem in Red Hat JBoss Enterprise Application... CVE-2014-7853 4.0 MediumFebruary 13, 2015
• apache-cxf Red Hat The Role Based Access Control (RBAC) implementation in JBoss Enterprise Application Platform (EAP... CVE-2014-7849 4.0 MediumFebruary 13, 2015
• apache-cxf Red Hat The org.jboss.security.plugins.mapping.JBossMappingManager implementation in JBoss Security in... CVE-2014-7827 3.5 LowFebruary 13, 2015
• apache-cxf Red Hat XML External Entity Reference in RESTEasy CVE-2014-7839 Fix available 6.4 MediumNovember 25, 2014
• apache-cxf Red Hat Improper Authentication in Apache WSS4J CVE-2014-3623 Fix available 5.0 MediumOctober 30, 2014
• apache-cxf Red Hat Improper certificate validation in org.apache.httpcomponents:httpclient CVE-2012-6153 Fix available 4.3 MediumAugust 25, 2014
• apache-cxf Red Hat Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient CVE-2014-3577 Fix available 5.8 MediumAugust 21, 2014
• apache-cxf Red Hat org.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application... CVE-2014-3481 5.0 MediumJuly 7, 2014
• apache-cxf Red Hat Cleartext Transmission of Sensitive Information in Apache CXF CVE-2014-0035 Fix available 4.3 MediumJuly 7, 2014
• apache-cxf Red Hat Improper Input Validation in Apache CXF CVE-2014-0034 Fix available 4.3 MediumJuly 7, 2014
• apache-cxf Red Hat Uncontrolled Resource Consumption in Apache CXF CVE-2014-0110 Fix available 4.3 MediumMay 8, 2014
• apache-cxf Red Hat Uncontrolled Resource Consumption in Apache CXF CVE-2014-0109 Fix available 4.3 MediumMay 8, 2014
• apache-cxf Red Hat Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2, when using a Java Security Manager ... CVE-2014-0093 5.8 MediumApril 3, 2014
• apache-cxf Red Hat Apache Tomcat is vulnerable to HTTP request-smuggling CVE-2013-4286 Fix available EPSS 16.2% 5.8 MediumFebruary 26, 2014
• apache-cxf Red Hat The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise... CVE-2013-2133 5.5 MediumDecember 6, 2013
• apache-cxf Red Hat Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0... CVE-2012-4572 3.7 LowOctober 28, 2013
• apache-cxf Red Hat The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and... CVE-2012-4529 4.3 MediumOctober 28, 2013
• apache-cxf Red Hat Exposure of Sensitive Information to an Unauthorized Actor in JGroup CVE-2013-4112 Fix available 5.4 MediumSeptember 28, 2013
• apache-cxf Red Hat PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local... CVE-2013-1921 1.9 LowSeptember 28, 2013
• apache-cxf Red Hat Improper Control of Generation of Code in HawtJNI CVE-2013-2035 Fix available 4.4 MediumAugust 28, 2013
• apache-cxf Red Hat Inefficient Algorithmic Complexity in Apache Santuario XML Security CVE-2013-2172 Fix available 4.3 MediumAugust 20, 2013
• apache-cxf Red Hat Inadequate Encryption Strength in Apache CXF CVE-2012-5575 Public exploitFix available 6.4 MediumAugust 19, 2013
• apache-cxf Red Hat Missing XML Validation in Apache Xerces2 CVE-2013-4002 Public exploitFix available EPSS 24.7% 7.1 HighJuly 23, 2013
• apache-cxf Red Hat mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is... CVE-2013-1896 Fix available EPSS 29.5% 4.3 MediumJuly 10, 2013
• apache-cxf Red Hat mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data... CVE-2013-1862 Fix available EPSS 24.9% 5.1 MediumJune 10, 2013
• apache-cxf Red Hat Improper Authentication in Apache Tomcat CVE-2013-2067 Fix available EPSS 10.4% 6.8 MediumMay 10, 2013
• Show olderLoading…