Filter
Versions
2.6.0
11
2.7.0
10
2.5.0
9
2.5.1
9
2.5.2
9
2.6.1
9
2.7.1
9
2.5.3
8
2.6.2
8
2.6.3
8
2.6.4
8
2.7.2
8
2.6.5
7
2.7.3
7
3.1.0
7
2.4.5
6
2.4.6
6
2.5.4
6
2.5.5
6
2.5.6
6
2.5.7
6
2.6.6
6
3.0.0
6
2.4.0
5
2.4.7
5
2.5.8
5
2.6.10
5
2.7.4
5
2.7.5
5
2.7.6
5
2.7.7
5
3.3.0
5
2.4.1
4
2.4.2
4
2.4.3
4
2.4.4
4
2.5.9
4
2.6.11
4
2.6.7
4
2.6.8
4
2.6.9
4
2.7.8
4
3.2.0
4
2.6.12
3
2.7.9
3
3.1.1
3
3.1.2
3
3.1.3
3
3.1.4
3
3.1.5
3
3.1.6
3
3.1.7
3
3.1.8
3
3.4.0
3
3.6.0
3
4.0.0
3
2.6.13
2
2.7.10
2
3.0.11
2
3.5.0
2
2.0
1
2.0-m1
1
2.0-rc
1
2.0.1
1
2.0.10
1
2.0.11
1
2.0.12
1
2.0.2
1
2.0.3
1
2.0.4
1
2.0.5
1
2.0.6
1
2.0.7
1
2.0.8
1
2.0.9
1
2.1
1
2.1.1
1
2.1.2
1
2.1.3
1
2.1.4
1
2.1.5
1
2.1.6
1
2.1.7
1
2.1.8
1
2.1.9
1
2.2
1
2.2.0
1
2.2.1
1
2.2.2
1
2.2.3
1
2.2.4
1
2.2.5
1
2.2.6
1
2.2.7
1
2.2.8
1
2.6.17
1
2.7.13
1
3.0.12
1
3.0.13
1
3.1.11
1
3.1.9
1
3.2.12
1
3.4.4
1
redhat/eap7-apache-cxfApache CXF SSRF Vulnerability
9.8
First published (updated )
redhat/rh-sso7-keycloakApache CXF directory listing / code exfiltration
7.5
First published (updated )
maven/org.apache.cxf:cxf-rt-rs-security-joseApache CXF Denial of Service vulnerability in JOSE
7.5
First published (updated )
maven/org.apache.cxf:cxf-rt-transports-httpApache CXF: Unrestricted memory consumption in CXF HTTP clients
7.5
First published (updated )
maven/org.apache.cxf:cxf-rt-rs-service-descriptionApache CXF: SSRF vulnerability via WADL stylesheet parameter
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Oracle Retail Financial IntegrationBypass of the secureValidation property
7.5
First published (updated )
IBM Security GuardiumApache CXF could allow a remote attacker to conduct a man-in-the-middle attack. The TLS hostname ver…
8.1
First published (updated )
Apache CXFThe OAuth2 Hawk and JOSE MAC Validation code in Apache CXF prior to 3.0.13 and 3.1.x prior to 3.1.10…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/aopallianceThe implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache W…
5.9
First published (updated )
Apache CXFApache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify t…
6.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache CXFThe URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, wh…
5.8
First published (updated )
Apache CXFApache CXF 2.4.5 through 2.4.7, 2.5.1 through 2.5.3, and 2.6.x before 2.6.1, does not properly enfor…
4.3
First published (updated )
Apache CXFApache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token s…
10
First published (updated )
Apache CXFThe WS-SP UsernameToken policy in Apache CXF 2.4.5 and 2.5.1 allows remote attackers to bypass authe…
9.8
First published (updated )
Apache CXFThe streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache CXFApache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext UsernameToke…
First published (updated )
redhat/wss4jApache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x…
First published (updated )
Apache CXFThe SamlHeaderInHandler in Apache CXF before 2.6.11, 2.7.x before 2.7.8, and 3.0.x before 3.0.1 allo…
First published (updated )
Apache CXFApache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of servic…
4.3
First published (updated )
Apache CXFApache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of servic…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache CXFThe SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning …
4.3
First published (updated )
Apache CXFThe SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allo…
First published (updated )
Apache CXFApache CXF is vulnerable to a denial of service, caused by the failure to restrict the number of mes…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.