apache-cxf vulnerabilities (Red Hat)
79 vulnerabilities.
apache-cxfRed HatImproper Authentication in Apache CXF5.0 Mediumapache-cxfRed HatImproper Authentication in Apache CXF5.8 Mediumapache-cxfRed HatMultiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the...4.3 Mediumapache-cxfRed HatMultiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24...4.3 Mediumapache-cxfRed HatThe AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web...4.9 Mediumapache-cxfRed HatThe SecurityAssociation.getCredential method in JBoss Enterprise Application Platform (EAP)...5.8 Mediumapache-cxfRed HatThe CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web...4.0 Mediumapache-cxfRed HatThe (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss Enterprise...6.8 Mediumapache-cxfRed HatThe NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5.1.2 and 5.2.0,...2.1 Lowapache-cxfRed HatCross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application...4.3 Mediumapache-cxfRed HatJboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypass5.3 Mediumapache-cxfRed HatJboss enterprise application platform: org.jboss.as.ejb3: jboss enterprise application platform: access restriction bypass via improper ejb method authorization6.5 Mediumapache-cxfRed HatImproper Authentication in Apache CXF4.3 Mediumapache-cxfRed HatXML Signature/Encryption Not Validated in Apache CXF10.0 Highapache-cxfRed HatUser confusion in IronJacamar4.3 Mediumapache-cxfRed HatAuthentication Bypass in Apache Tomcat4.3 Mediumapache-cxfRed HatJGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before...3.3 Lowapache-cxfRed HatThe servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA...6.8 Mediumapache-cxfRed HatCross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss...6.0 Mediumapache-cxfRed HatThe W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss...5.0 Mediumapache-cxfRed HatRemote web-service operation execution in Apache CXF4.3 Mediumapache-cxfRed HatMultiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in...2.6 Lowapache-cxfRed Hattwiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments,...2.1 Lowapache-cxfRed HatImproper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework7.5 Highapache-cxfRed HatOracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup,...2.1 Lowapache-cxfRed HatOpenID4Java does not verify that Attribute Exchange (AX) information is signed5.8 Mediumapache-cxfRed Hatjboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss...6.8 Mediumapache-cxfRed HatJBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4...5.0 Mediumapache-cxfRed HatCross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server...4.3 Medium