Where
AND
AND
-Infinity
0

Trending

Last week
Last month
Last year

maven/org.apache.cxf:cxf-coreThe SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning …

Risk 23
Severity
4.3
AV:N/AC:M/Au:N/C:P/I:N/A:N

The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.

1 / 2
First published (updated )
CVE-2014-0035

maven/org.apache.cxf:cxf-rt-ws-securityInput Validation

Risk 23
Severity
4.3
Input Validation
AV:N/AC:M/Au:N/C:P/I:N/A:N

The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.

1 / 2
First published (updated )
CVE-2014-0034

maven/org.apache.cxf:cxf-coreApache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of servic…

Risk 23
Severity
4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P

Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message.

1 / 2
First published (updated )
CVE-2014-0110

maven/org.apache.cxf:cxf-coreApache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of servic…

Risk 23
Severity
4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P

Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error.

1 / 2
First published (updated )
CVE-2014-0109

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203