Apache Software Foundation Cxf vulnerabilities

• apache cxf Apache CXF: Prevent unbounded XML document size in StaxUtils by adding default element and character limits CVE-2026-108039 7.5 HighOctober 9, 2026
• apache cxf Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification. CVE-2026-107938 9.1 CriticalOctober 9, 2026
• apache cxf Apache CXF: The attachment header size and count limits can be bypassed, which allows denial of service through memory exhaustion. CVE-2026-107937 7.5 HighOctober 9, 2026
• apache cxf Apache CXF: XML Signature wrapping in JAX-RS XML Security CVE-2026-100227 7.5 HighOctober 9, 2026
• apache cxf Apache CXF: STSTokenValidator can accept untrusted SAML assertions because it shares validation state between requests CVE-2026-97791 7.5 HighOctober 9, 2026
• apache cxf Apache CXF: Authentication bypass via weak cache keys for validated STS tokens CVE-2026-97468 9.1 CriticalOctober 9, 2026
• apache cxf Apache CXF: FIQL Query Parser Denial of Service CVE-2026-86463 7.5 HighOctober 9, 2026
• apache cxf Apache CXF: OIDC RP Open Redirect CVE-2026-79650 6.1 MediumOctober 9, 2026
• apache cxf Apache CXF: Unbounded DEFLATE Decompression in CXF JOSE/JWE and SAML Processing (Decompression Bomb) CVE-2026-78384 7.5 HighOctober 9, 2026
• apache cxf Apache CXF: JPA authorization-code consume is non-atomic CVE-2026-73179 8.1 HighOctober 9, 2026
• apache cxf Apache CXF: Inoperative max_age authentication-freshness check in OidcClientCodeRequestFilter CVE-2026-71575 9.1 CriticalOctober 9, 2026
• apache cxf Apache CXF: OAuth2 Authorization Code Replay via TOCTOU in JCacheCodeDataProvider CVE-2026-57818 8.1 HighAugust 6, 2026
• apache cxf Apache CXF: OAuth2 Dynamic Client Registration Scope Self-Escalation CVE-2026-61466 9.1 CriticalAugust 6, 2026
• apache cxf Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters CVE-2026-63687 9.1 CriticalAugust 6, 2026
• apache cxf Apache CXF: Self-issued ID token claims validation skipped CVE-2026-65583 9.1 CriticalAugust 6, 2026
• apache cxf Apache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replay CVE-2026-68079 9.8 CriticalAugust 6, 2026
• apache cxf Apache CXF: Revocation bypass in DefaultEncryptingOAuthDataProvider CVE-2026-68481 7.5 HighAugust 6, 2026
• apache cxf Apache CXF: XXE via WSDL/XSD import parsing CVE-2026-65432 7.5 HighAugust 6, 2026
• apache cxf Apache CXF: The authorization code hash (c_hash) is not enforced for the hybrid OIDC flow CVE-2026-57817 8.1 HighAugust 6, 2026
• apache cxf Apache CXF: Unsafe deserialization of inbound JMS ObjectMessage CVE-2026-66909 Fix available 9.8 CriticalAugust 6, 2026
• apache cxf Apache CXF: Denial of service via message header attachments CVE-2026-64958 7.5 HighAugust 6, 2026
• apache cxf Apache CXF: No default restriction on the amount of form parameters per message CVE-2026-57819 7.5 HighAugust 6, 2026
• apache cxf Apache CXF: Denial of Service attack via large attachments CVE-2026-54225 7.5 HighAugust 6, 2026
• apache cxf Apache CXF: No restriction on attachment headers per message CVE-2026-50645 Fix available 7.5 HighJune 12, 2026
• apache cxf Apache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entry CVE-2026-50634 Fix available 6.5 MediumJune 12, 2026
• apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +3 more +5 more Apache CXF: JNDI Injection vulnerability in DispatchMDBMessageListenerImpl CVE-2026-50633 Fix available 8.1 HighJune 12, 2026
• apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +8 more +10 more Apache CXF: JNDI Injection Vulnerability in JMSConfigFactory CVE-2026-50632 Fix available 8.1 HighJune 12, 2026
• apache cxf Apache CXF: OAuth2: TOCTOU Race Condition in Refresh Token Processing CVE-2026-50631 Fix available 7.4 HighJune 12, 2026
• apache cxf Apache CXF: OAuth2: HTTP Response Splitting via WWW-Authenticate Realm Injection CVE-2026-50630 Fix available 6.5 MediumJune 12, 2026
• apache cxf Apache CXF: OAuth2: Log Injection via Unsanitized Client Identifier CVE-2026-50629 Fix available 5.3 MediumJune 12, 2026
• apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +5 more +7 more Apache CXF: OAuth2: Inverted IP Binding Check Defeats Security Control CVE-2026-50628 Fix available 9.8 CriticalJune 12, 2026
• apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +5 more +7 more Apache CXF: OAuth2: Missing JWT Audience and Issuer Validation in Access Token Validator CVE-2026-50627 Fix available 9.1 CriticalJune 12, 2026
• apache cxf, red hat build of apache camel 4 for quarkus 3, build of apache camel 4.18 for quarkus 3.33 +12 more +14 more Apache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtils CVE-2026-49875 Fix available 9.8 CriticalJune 12, 2026
• apache cxf Apache CXF: Authentication Bypass in OAuth2 TokenIntrospectionService CVE-2026-50623 Fix available 4.8 MediumJune 12, 2026
• apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +4 more +6 more Apache CXF: Incomplete fix for CVE-2025-48913 (Untrusted JMS configuration can lead to RCE) CVE-2026-44417 Fix available 7.5 HighMay 22, 2026
• apache cxf Apache CXF: XXE vulnerability in WS-Transfer functionality CVE-2026-44618 Fix available 5.3 MediumMay 22, 2026
• apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +1 more +3 more Apache CXF: LDAP Injection vulnerability in XKMS LDAP Repository CVE-2026-44930 Fix available 9.8 CriticalMay 22, 2026
• apache cxf Apache CXF: Untrusted JMS configuration can lead to RCE CVE-2025-48913 Fix available 9.8 CriticalAugust 8, 2025
• apache cxf Apache CXF: Denial of Service and sensitive data exposure in logs CVE-2025-48795 Fix available 5.6 MediumJuly 15, 2025
• apache cxf Apache CXF: Denial of Service vulnerability with temporary files CVE-2025-23184 Fix available 5.9 MediumJanuary 21, 2025
• apache cxf Apache CXF: Unrestricted memory consumption in CXF HTTP clients CVE-2024-41172 Fix available 7.5 HighJuly 19, 2024
• apache cxf Apache CXF Denial of Service vulnerability in JOSE CVE-2024-32007 Fix available 7.5 HighJuly 19, 2024
• apache cxf Apache CXF: SSRF vulnerability via WADL stylesheet parameter CVE-2024-29736 Fix available 9.1 CriticalJuly 19, 2024
• apache cxf, netapp oncommand workflow automation, ontap tools +2 more Apache CXF SSRF Vulnerability using the Aegis databinding CVE-2024-28752 Public exploitFix available 9.3 CriticalMarch 15, 2024
• apache cxf Apache CXF SSRF Vulnerability CVE-2022-46364 Public exploitFix available 9.8 CriticalDecember 13, 2022
• apache cxf Apache CXF directory listing / code exfiltration CVE-2022-46363 Fix available 7.5 HighDecember 13, 2022
• apache cxf, tomee, oracle business intelligence +2 more +4 more Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter CVE-2021-30468 Fix available 7.5 HighJune 16, 2021
• apache cxf, oracle business intelligence, communications diameter intelligence hub +3 more +5 more OAuth 2 authorization service vulnerable to DDos attacks CVE-2021-22696 Fix available 7.5 HighApril 2, 2021
• apache cxf, netapp snap creator framework, vasa provider for clustered data ontap +3 more +5 more Apache CXF Reflected XSS in the services listing page via the styleSheetPath CVE-2020-13954 Fix available EPSS 40.9% 6.1 MediumNovember 12, 2020
• apache cxf, netapp oncommand workflow automation, snapmanager +7 more +9 more Apache CXF JMX Integration is vulnerable to a MITM attack CVE-2020-1954 Fix available 5.3 MediumApril 1, 2020
• Show olderLoading…