Apache Cxf Fediz vulnerabilities

• apache cxf fediz High severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf… CVE-2018-8038 Public exploitFix available EPSS 10.6% 7.5 HighJuly 5, 2018
• apache cxf fediz Moderate severity vulnerability that affects org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf.fediz:fediz-spring3 CVE-2017-12631 Fix available 8.8 HighNovember 30, 2017
• apache cxf fediz Apache CXF Fediz application plugins are vulnerable to Denial of Service (DoS) attacks CVE-2015-5175 Fix available EPSS 10.9% 7.5 HighJune 7, 2017
• apache cxf fediz Cross-Site Request Forgery in Apache CXF Fediz CVE-2017-7662 Fix available 8.8 HighMay 16, 2017
• apache cxf fediz Moderate severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, and org.apache.cxf.fediz:fediz-spring2 CVE-2017-7661 Fix available 8.8 HighMay 16, 2017
• apache cxf fediz High severity vulnerability that affects org.apache.cxf.fediz:fediz-spring and org.apache.cxf.fediz:fediz-spring2 CVE-2016-4464 Fix available 9.8 CriticalJuly 5, 2016