Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/eap7-apache-cxf@3.4.10-1.redhat_00001.1?arch=el9eap
purl pkg:rpm/redhat/eap7-apache-cxf@3.4.10-1.redhat_00001.1?arch=el9eap
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-y8up-mkx2-abcn
Aliases:
CVE-2022-46364
GHSA-x3x3-qwjq-8gj4
Apache CXF Server-Side Request Forgery vulnerability A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:56:06.352518+00:00 RedHat Importer Affected by VCID-y8up-mkx2-abcn https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-46364.json 38.0.0