Skip to contentApache Software Foundation Cxf vulnerabilities
- apache cxf, oracle commerce guided search, enterprise manager base platform +2 more +4 morePotential session hijack in Apache CXFCVE-2019-12419Fix availableEPSS 13.8%9.8 Critical
- apache cxf, oracle commerce guided search, flexcube private banking +1 more +3 morePotential DOS attack due to unrestricted attachment count in messagesCVE-2019-12406Fix available6.5 Medium
- apache cxf fedizHigh severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf…CVE-2018-8038Public exploitFix availableEPSS 10.2%7.5 High
- apache cxf, redhat jboss enterprise application platform +1 moreApache CXF TLS hostname verification does not work correctly with com.sun.net.ssl.*CVE-2018-8039Public exploitFix available8.1 High
- apache cxf fedizModerate severity vulnerability that affects org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf.fediz:fediz-spring3CVE-2017-12631Fix available8.8 High
- apache cxfImproper Input Validation in Apache CXFCVE-2017-12624Public exploitFix available5.5 Medium
- apache cxfCovert Timing Channel in Apache CXFCVE-2017-3156Fix available7.5 High
- apache cxfImproper Restriction of XML External Entity Reference in Apache CXF JAX-RSCVE-2016-8739Fix available7.5 High
- apache cxfImproper Neutralization of Input During Web Page Generation in Apache CXFCVE-2016-6812Public exploitFix available6.1 Medium
- apache cxf fedizCross-Site Request Forgery in Apache CXF FedizCVE-2017-7662Fix available8.8 High
- apache cxf fedizModerate severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, and org.apache.cxf.fediz:fediz-spring2CVE-2017-7661Fix available8.8 High
- apache cxfSession Fixation in Apache CXFCVE-2017-5656Fix available7.5 High
- apache cxfImproper Certificate Validation in Apache CXFCVE-2017-5653Fix availableEPSS 11.2%5.3 Medium