org.apache.cxf:cxf-rt-transports-jms vulnerabilities (TuxCare)
19 vulnerabilities.
org.apache.cxf:cxf-rt-transports-jmsTuxCareApache CXF: Prevent unbounded XML document size in StaxUtils by adding default element and character limits7.5 Highorg.apache.cxf:cxf-rt-transports-jmsTuxCareApache CXF: Unbounded DEFLATE Decompression in CXF JOSE/JWE and SAML Processing (Decompression Bomb)7.5 Highorg.apache.cxf:cxf-rt-transports-jmsTuxCareApache CXF: XXE via WSDL/XSD import parsing7.5 Highorg.apache.cxf:cxf-rt-transports-jmsTuxCareApache CXF: Denial of service via message header attachments7.5 Highorg.apache.cxf:cxf-rt-transports-jmsTuxCareApache CXF: No default restriction on the amount of form parameters per message7.5 Highorg.apache.cxf:cxf-rt-transports-jmsTuxCareApache CXF: No restriction on attachment headers per message7.5 Highorg.apache.cxf:cxf-rt-transports-jmsTuxCareApache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entry6.5 Mediumorg.apache.cxf:cxf-rt-transports-jmsTuxCareApache CXF: JNDI Injection vulnerability in DispatchMDBMessageListenerImpl8.1 Highorg.apache.cxf:cxf-rt-transports-jmsTuxCareApache CXF: JNDI Injection Vulnerability in JMSConfigFactory8.1 Highorg.apache.cxf:cxf-rt-transports-jmsTuxCareApache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtils9.8 Criticalorg.apache.cxf:cxf-rt-transports-jmsTuxCareApache CXF: Authentication Bypass in OAuth2 TokenIntrospectionService4.8 Mediumorg.apache.cxf:cxf-rt-transports-jmsTuxCareApache CXF: Incomplete fix for CVE-2025-48913 (Untrusted JMS configuration can lead to RCE)7.5 Highorg.apache.cxf:cxf-rt-transports-jmsTuxCareApache CXF: LDAP Injection vulnerability in XKMS LDAP Repository9.8 Criticalorg.apache.cxf:cxf-rt-transports-jmsTuxCareApache CXF: Untrusted JMS configuration can lead to RCE9.8 Criticalorg.apache.cxf:cxf-rt-transports-jmsTuxCareApache CXF Denial of Service vulnerability in JOSE7.5 Highorg.apache.cxf:cxf-rt-transports-jmsTuxCareApache CXF: SSRF vulnerability via WADL stylesheet parameter9.1 Criticalorg.apache.cxf:cxf-rt-transports-jmsTuxCareApache CXF SSRF Vulnerability using the Aegis databinding9.3 Criticalorg.apache.cxf:cxf-rt-transports-jmsTuxCareApache CXF SSRF Vulnerability9.8 Criticalorg.apache.cxf:cxf-rt-transports-jmsTuxCareApache CXF directory listing / code exfiltration7.5 High