org.apache.cxf:cxf-core vulnerabilities (TuxCare)
20 vulnerabilities.
org.apache.cxf:cxf-coreTuxCareApache CXF: Prevent unbounded XML document size in StaxUtils by adding default element and character limits7.5 Highorg.apache.cxf:cxf-coreTuxCareApache CXF: Unbounded DEFLATE Decompression in CXF JOSE/JWE and SAML Processing (Decompression Bomb)7.5 Highorg.apache.cxf:cxf-coreTuxCareApache CXF: XXE via WSDL/XSD import parsing7.5 Highorg.apache.cxf:cxf-coreTuxCareApache CXF: Denial of service via message header attachments7.5 Highorg.apache.cxf:cxf-coreTuxCareApache CXF: No default restriction on the amount of form parameters per message7.5 Highorg.apache.cxf:cxf-coreTuxCareApache CXF: No restriction on attachment headers per message7.5 Highorg.apache.cxf:cxf-coreTuxCareApache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entry6.5 Mediumorg.apache.cxf:cxf-coreTuxCareApache CXF: JNDI Injection vulnerability in DispatchMDBMessageListenerImpl8.1 Highorg.apache.cxf:cxf-coreTuxCareApache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtils9.8 Criticalorg.apache.cxf:cxf-coreTuxCareApache CXF: Authentication Bypass in OAuth2 TokenIntrospectionService4.8 Mediumorg.apache.cxf:cxf-coreTuxCareApache CXF: Incomplete fix for CVE-2025-48913 (Untrusted JMS configuration can lead to RCE)7.5 Highorg.apache.cxf:cxf-coreTuxCareApache CXF: LDAP Injection vulnerability in XKMS LDAP Repository9.8 Criticalorg.apache.cxf:cxf-coreTuxCareApache CXF: Untrusted JMS configuration can lead to RCE9.8 Criticalorg.apache.cxf:cxf-coreTuxCareApache CXF: Denial of Service and sensitive data exposure in logs5.6 Mediumorg.apache.cxf:cxf-coreTuxCareApache CXF: Denial of Service vulnerability with temporary files5.9 Mediumorg.apache.cxf:cxf-coreTuxCareApache CXF Denial of Service vulnerability in JOSE7.5 Highorg.apache.cxf:cxf-coreTuxCareApache CXF: SSRF vulnerability via WADL stylesheet parameter9.1 Criticalorg.apache.cxf:cxf-coreTuxCareApache CXF SSRF Vulnerability using the Aegis databinding9.3 Criticalorg.apache.cxf:cxf-coreTuxCareApache CXF SSRF Vulnerability9.8 Criticalorg.apache.cxf:cxf-coreTuxCareApache CXF directory listing / code exfiltration7.5 High