org.apache.cxf:cxf-integration-jca vulnerabilities (TuxCare)
13 vulnerabilities.
-
org.apache.cxf:cxf-integration-jcaTuxCare Apache CXF: Prevent unbounded XML document size in StaxUtils by adding default element and character limits 7.5 High -
org.apache.cxf:cxf-integration-jcaTuxCare Apache CXF: Unbounded DEFLATE Decompression in CXF JOSE/JWE and SAML Processing (Decompression Bomb) 7.5 High -
org.apache.cxf:cxf-integration-jcaTuxCare Apache CXF: XXE via WSDL/XSD import parsing 7.5 High -
org.apache.cxf:cxf-integration-jcaTuxCare Apache CXF: Denial of service via message header attachments 7.5 High -
org.apache.cxf:cxf-integration-jcaTuxCare Apache CXF: No default restriction on the amount of form parameters per message 7.5 High -
org.apache.cxf:cxf-integration-jcaTuxCare Apache CXF: No restriction on attachment headers per message 7.5 High -
org.apache.cxf:cxf-integration-jcaTuxCare Apache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entry 6.5 Medium -
org.apache.cxf:cxf-integration-jcaTuxCare Apache CXF: JNDI Injection vulnerability in DispatchMDBMessageListenerImpl 8.1 High -
org.apache.cxf:cxf-integration-jcaTuxCare Apache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtils 9.8 Critical -
org.apache.cxf:cxf-integration-jcaTuxCare Apache CXF: Authentication Bypass in OAuth2 TokenIntrospectionService 4.8 Medium -
org.apache.cxf:cxf-integration-jcaTuxCare Apache CXF: Incomplete fix for CVE-2025-48913 (Untrusted JMS configuration can lead to RCE) 7.5 High -
org.apache.cxf:cxf-integration-jcaTuxCare Apache CXF: LDAP Injection vulnerability in XKMS LDAP Repository 9.8 Critical -
org.apache.cxf:cxf-integration-jcaTuxCare Apache CXF: Untrusted JMS configuration can lead to RCE 9.8 Critical