Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.cxf/cxf-core@2.7.0
purl pkg:maven/org.apache.cxf/cxf-core@2.7.0
Tags Ghost
Next non-vulnerable version 3.5.11
Latest non-vulnerable version 4.1.1
Risk 3.1
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-gbpn-pskk-qbae
Aliases:
CVE-2014-0109
GHSA-5wqf-h3r3-gxvh
Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error.
2.7.11
Affected by 0 other vulnerabilities.
VCID-m18p-dpdb-skf7
Aliases:
CVE-2014-0035
GHSA-v45r-rj5x-hpg2
The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
2.7.10
Affected by 0 other vulnerabilities.
VCID-qsde-tz92-xqge
Aliases:
CVE-2014-0110
GHSA-5xf9-3v63-ww6f
Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message.
2.7.11
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T16:00:58.660748+00:00 GHSA Importer Affected by VCID-qsde-tz92-xqge https://github.com/advisories/GHSA-5xf9-3v63-ww6f 38.0.0
2026-04-01T16:00:58.619224+00:00 GHSA Importer Affected by VCID-gbpn-pskk-qbae https://github.com/advisories/GHSA-5wqf-h3r3-gxvh 38.0.0
2026-04-01T16:00:58.096802+00:00 GHSA Importer Affected by VCID-m18p-dpdb-skf7 https://github.com/advisories/GHSA-v45r-rj5x-hpg2 38.0.0
2026-04-01T12:50:22.273221+00:00 GitLab Importer Affected by VCID-m18p-dpdb-skf7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-core/CVE-2014-0035.yml 38.0.0
2026-04-01T12:50:15.893258+00:00 GitLab Importer Affected by VCID-qsde-tz92-xqge https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-core/CVE-2014-0110.yml 38.0.0
2026-04-01T12:50:11.716759+00:00 GitLab Importer Affected by VCID-gbpn-pskk-qbae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-core/CVE-2014-0109.yml 38.0.0