Search for packages
| purl | pkg:rpm/redhat/apache-cxf@2.7.12-1.SP1_redhat_5.1.ep6?arch=el5 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3bxq-vmjj-kqfe
Aliases: CVE-2014-3577 GHSA-cfh5-3ghh-wfjx |
org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "CN=" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the "foo,CN=www.apache.org" string in the O field. | There are no reported fixed by versions. |
|
VCID-da65-c1ce-v7f5
Aliases: CVE-2012-6153 GHSA-2x83-r56g-cv47 |
http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subject that specifies a common name in a field that is not the CN field. NOTE: this issue exists because of an incomplete fix for CVE-2012-5783. | There are no reported fixed by versions. |
|
VCID-wmr9-j6fm-pbap
Aliases: CVE-2014-3623 GHSA-99v3-9x35-c5vf |
Improper security semantics enforcement of SAML SubjectConfirmation methods This package when using `TransportBinding`, does not properly enforce the SAML `SubjectConfirmation` method security semantics, which allows remote attackers to conduct spoofing attacks via unspecified vectors. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:46:27.849066+00:00 | RedHat Importer | Affected by | VCID-da65-c1ce-v7f5 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6153.json | 38.0.0 |
| 2026-04-01T14:46:25.388030+00:00 | RedHat Importer | Affected by | VCID-3bxq-vmjj-kqfe | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3577.json | 38.0.0 |
| 2026-04-01T14:45:31.982859+00:00 | RedHat Importer | Affected by | VCID-wmr9-j6fm-pbap | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3623.json | 38.0.0 |