Skip to contentApache Cxf vulnerabilities
- apache cxf, netapp oncommand workflow automation, snapmanager +7 more +9 moreApache CXF JMX Integration is vulnerable to a MITM attackCVE-2020-1954Fix available5.3 Medium
- apache wss4j, red hat jbossws, apache cxf +8 more +10 moreUse of a Broken or Risky Cryptographic Algorithm in Apache WSS4JCVE-2011-2487Fix available5.9 Medium
- apache cxf, oracle commerce guided search, communications element manager +4 more +6 moreReflected Cross-Site Scripting in Apache CXFCVE-2019-17573Public exploitFix available6.1 Medium
- apache cxf, oracle commerce guided search, communications diameter signaling router +5 more +7 morePrivate key leak in Apache CXFCVE-2019-12423Fix available7.5 High
- apache cxf, oracle commerce guided search, enterprise manager base platform +2 more +4 morePotential session hijack in Apache CXFCVE-2019-12419Fix availableEPSS 13.8%9.8 Critical
- apache cxf, oracle commerce guided search, flexcube private banking +1 more +3 morePotential DOS attack due to unrestricted attachment count in messagesCVE-2019-12406Fix available6.5 Medium
- apache cxf fedizHigh severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf…CVE-2018-8038Public exploitFix availableEPSS 10.2%7.5 High
- apache cxf, redhat jboss enterprise application platform +1 moreApache CXF TLS hostname verification does not work correctly with com.sun.net.ssl.*CVE-2018-8039Public exploitFix available8.1 High
- apache cxf fedizModerate severity vulnerability that affects org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf.fediz:fediz-spring3CVE-2017-12631Fix available8.8 High
- apache cxfImproper Input Validation in Apache CXFCVE-2017-12624Public exploitFix available5.5 Medium
- apache cxfCovert Timing Channel in Apache CXFCVE-2017-3156Fix available7.5 High
- apache cxfImproper Restriction of XML External Entity Reference in Apache CXF JAX-RSCVE-2016-8739Fix available7.5 High
- apache cxfImproper Neutralization of Input During Web Page Generation in Apache CXFCVE-2016-6812Public exploitFix available6.1 Medium
- apache cxfImproper Authentication in Apache CXFCVE-2012-0803Fix available9.8 Critical
- apache cxf fedizApache CXF Fediz application plugins are vulnerable to Denial of Service (DoS) attacksCVE-2015-5175Fix availableEPSS 10.9%7.5 High
- apache cxf fedizCross-Site Request Forgery in Apache CXF FedizCVE-2017-7662Fix available8.8 High
- apache cxf fedizModerate severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, and org.apache.cxf.fediz:fediz-spring2CVE-2017-7661Fix available8.8 High
- apache cxfSession Fixation in Apache CXFCVE-2017-5656Fix available7.5 High
- apache cxfImproper Certificate Validation in Apache CXFCVE-2017-5653Fix availableEPSS 11.2%5.3 Medium
- apache cxf fedizHigh severity vulnerability that affects org.apache.cxf.fediz:fediz-spring and org.apache.cxf.fediz:fediz-spring2CVE-2016-4464Fix available9.8 Critical
- apache cxfImproper Access Control in Apache CXFCVE-2015-5253Fix available4.0 Medium
- apache cxf, wss4j +1 moreImproper Authentication in Apache WSS4JCVE-2014-3623Fix available5.0 Medium
- apache cxfLoop with Unreachable Exit Condition in Apache CXFCVE-2014-3584Fix available5.0 Medium
- apache cxf, redhat jboss enterprise application platform +1 moreCleartext Transmission of Sensitive Information in Apache CXFCVE-2014-0035Fix available4.3 Medium
- apache cxf, redhat jboss enterprise application platform +1 moreImproper Input Validation in Apache CXFCVE-2014-0034Fix available4.3 Medium
- apache cxfUncontrolled Resource Consumption in Apache CXFCVE-2014-0110Fix available4.3 Medium
- apache cxfUncontrolled Resource Consumption in Apache CXFCVE-2014-0109Fix available4.3 Medium
- apache cxfMissing XML Validation in Apache CXFCVE-2013-2160Public exploitFix availableEPSS 32.3%5.0 Medium
- apache cxf, redhat jboss enterprise application platform, jboss enterprise portal platform +3 more +5 moreInadequate Encryption Strength in Apache CXFCVE-2012-5575Public exploitFix available6.4 Medium
- apache cxfImproper Authentication in Apache CXFCVE-2013-0239Fix available5.0 Medium
- apache cxfImproper Authentication in Apache CXFCVE-2012-5633Fix available5.8 Medium
- apache cxfImproper Authentication in Apache CXFCVE-2012-2378Fix available4.3 Medium
- apache cxfXML Signature/Encryption Not Validated in Apache CXFCVE-2012-2379Fix available10.0 High
- apache cxf** DISPUTED ** The wsdl_first_https sample code in distribution/src/main/release/samples...CVE-2012-5786Disputed5.8 Medium
- apache cxfRemote web-service operation execution in Apache CXFCVE-2012-3451Fix available4.3 Medium
- apache cxfImproper Input Validation in Apache CXFCVE-2010-2076Fix available9.8 Critical