Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/apache-cxf@2.2.12-10.patch_06.ep5?arch=el5
purl pkg:rpm/redhat/apache-cxf@2.2.12-10.patch_06.ep5?arch=el5
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-6dpm-n1kk-5fer
Aliases:
CVE-2012-5633
GHSA-xf9f-32gh-h2w4
The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request. There are no reported fixed by versions.
VCID-n8bd-use6-pbb2
Aliases:
CVE-2012-3451
GHSA-55j7-f5wf-43m4
Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action String that is inconsistent with the message body. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:54:18.367281+00:00 RedHat Importer Affected by VCID-n8bd-use6-pbb2 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3451.json 38.0.0
2026-04-01T14:52:31.302938+00:00 RedHat Importer Affected by VCID-6dpm-n1kk-5fer https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5633.json 38.0.0