CLEANSTART-2026-FM55018: Apache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions
Published Nov 13, 2026
·Updated
Security vulnerability affects the wso2am package. Apache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions.
Affected Software
1 affected componentFixes available
cleanstart/wso2am<4.7.0-r4
4.7.0-r4
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/wso2amto a version that resolves this vulnerability.Fixed in 4.7.0-r4
Event History
Nov 13, 2026
Advisory Published
via OSV·12:36 AM
Data Sourced
via OSV·12:36 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The vulnerability is rated with network attack vector, low attack complexity, no privileges required, and no user interaction required. This indicates it can be targeted remotely without an authenticated account or user action.
2
What is the expected impact if exploitation succeeds?
The provided severity vector indicates high availability impact, with no indicated confidentiality or integrity impact. The primary risk is denial of service.