Filter
AND
AND
Versions
2.6.0
10
2.7.0
10
2.6.1
9
2.7.1
9
2.5.0
8
2.5.2
8
2.6.2
8
2.6.3
8
2.6.4
8
2.7.2
8
2.5.1
7
2.5.3
7
2.6.5
7
2.7.3
7
2.5.4
6
2.5.5
6
2.5.6
6
2.5.7
6
2.6.6
6
2.4.6
5
2.5.8
5
2.6.10
5
2.7.4
5
2.7.5
5
2.7.6
5
2.7.7
5
3.0.0
5
2.4.0
4
2.4.5
4
2.4.7
4
2.5.9
4
2.6.11
4
2.6.7
4
2.6.8
4
2.6.9
4
2.7.8
4
3.1.0
4
2.4.1
3
2.4.2
3
2.4.3
3
2.4.4
3
2.6.12
3
2.7.9
3
3.3.0
3
2.6.13
2
2.7.10
2
3.2.0
2
2.6.17
1
2.7.13
1
3.0.11
1
3.0.13
1
3.1.1
1
3.1.11
1
3.1.2
1
3.1.3
1
3.1.4
1
3.1.5
1
3.1.6
1
3.1.7
1
3.1.8
1
3.2.12
1
3.4.0
1
Oracle Business IntelligenceApache CXF Reflected XSS in the services listing page via the styleSheetPath
6.1
First published (updated )
Apache CXFApache CXF is vulnerable to a denial of service, caused by the failure to restrict the number of mes…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/cxfJAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that th…
5.3
First published (updated )
Apache CXFThe SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allo…
First published (updated )
Apache CXFThe SamlHeaderInHandler in Apache CXF before 2.6.11, 2.7.x before 2.7.8, and 3.0.x before 3.0.1 allo…
First published (updated )
redhat/wss4jApache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache CXFThe SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning …
4.3
First published (updated )
Apache CXFApache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of servic…
4.3
First published (updated )
Apache CXFApache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of servic…
4.3
First published (updated )
Apache CXFThe streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache CXFApache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext UsernameToke…
First published (updated )
Apache CXFThe URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, wh…
5.8
First published (updated )
Apache CXFApache CXF 2.4.5 through 2.4.7, 2.5.1 through 2.5.3, and 2.6.x before 2.6.1, does not properly enfor…
4.3
First published (updated )
Apache CXFApache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify t…
6.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/aopallianceThe implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache W…
5.9
First published (updated )