{"url":"http://public2.vulnerablecode.io/api/packages/61045?format=json","purl":"pkg:maven/org.apache.cxf/cxf-core@3.0.11","type":"maven","namespace":"org.apache.cxf","name":"cxf-core","version":"3.0.11","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"3.5.8","latest_non_vulnerable_version":"4.0.4","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/10029?format=json","vulnerability_id":"VCID-15fc-m94b-v7dy","summary":"","references":[{"reference_url":"https://access.redhat.com/errata/RHSA-2017:0868","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:0868"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-8739","reference_id":"","reference_type":"","scores":[{"value":"0.02672","scoring_system":"epss","scoring_elements":"0.86077","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-8739"},{"reference_url":"https://github.com/apache/cxf/commit/8e4970d9","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/cxf/commit/8e4970d9"},{"reference_url":"https://github.com/apache/cxf/commit/9deb2d17","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/cxf/commit/9deb2d17"},{"reference_url":"https://github.com/apache/cxf/commit/d9e2a6e7","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/cxf/commit/d9e2a6e7"},{"reference_url":"https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8739","reference_id":"CVE-2016-8739","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8739"},{"reference_url":"http://cxf.apache.org/security-advisories.data/CVE-2016-8739.txt.asc","reference_id":"CVE-2016-8739.TXT.ASC","reference_type":"","scores":[],"url":"http://cxf.apache.org/security-advisories.data/CVE-2016-8739.txt.asc"},{"reference_url":"https://github.com/advisories/GHSA-x7xf-253v-x3w8","reference_id":"GHSA-x7xf-253v-x3w8","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-x7xf-253v-x3w8"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/61048?format=json","purl":"pkg:maven/org.apache.cxf/cxf-core@3.0.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7fq3-e3fs-zfhp"},{"vulnerability":"VCID-aruv-kfjk-v7ha"},{"vulnerability":"VCID-ntbm-eta4-fygn"},{"vulnerability":"VCID-ttsv-cwyg-xkfq"},{"vulnerability":"VCID-zycn-qk4q-5bh2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.0.12"},{"url":"http://public2.vulnerablecode.io/api/packages/61049?format=json","purl":"pkg:maven/org.apache.cxf/cxf-core@3.1.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7fq3-e3fs-zfhp"},{"vulnerability":"VCID-ttsv-cwyg-xkfq"},{"vulnerability":"VCID-zycn-qk4q-5bh2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.1.9"}],"aliases":["CVE-2016-8739","GHSA-x7xf-253v-x3w8"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-15fc-m94b-v7dy"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/9864?format=json","vulnerability_id":"VCID-7fq3-e3fs-zfhp","summary":"","references":[{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2276","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2018:2276"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2277","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2018:2277"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2279","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2018:2279"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2423","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2018:2423"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2424","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2018:2424"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2425","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2018:2425"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2428","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2018:2428"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:2643","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2018:2643"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:3768","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2018:3768"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:3817","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2018:3817"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2018-8039","reference_id":"","reference_type":"","scores":[{"value":"0.02899","scoring_system":"epss","scoring_elements":"0.86599","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2018-8039"},{"reference_url":"https://github.com/apache/cxf","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/cxf"},{"reference_url":"https://github.com/apache/cxf/commit/8ed6208f987ff72e4c4d2cf8a6b1ec9b27575d4","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/cxf/commit/8ed6208f987ff72e4c4d2cf8a6b1ec9b27575d4"},{"reference_url":"https://github.com/apache/cxf/commit/fae6fabf9bd7647f5e9cb68897a7d72b545b741","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/cxf/commit/fae6fabf9bd7647f5e9cb68897a7d72b545b741"},{"reference_url":"https://github.com/apache/cxf/commit/fae6fabf9bd7647f5e9cb68897a7d72b545b741b","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/cxf/commit/fae6fabf9bd7647f5e9cb68897a7d72b545b741b"},{"reference_url":"https://lists.apache.org/thread.html/1f8ff31df204ad0374ab26ad333169e0387a5e7ec92422f337431866@%3Cdev.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/1f8ff31df204ad0374ab26ad333169e0387a5e7ec92422f337431866@%3Cdev.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://www.oracle.com/security-alerts/cpuapr2020.html","reference_id":"","reference_type":"","scores":[],"url":"https://www.oracle.com/security-alerts/cpuapr2020.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpujan2020.html","reference_id":"","reference_type":"","scores":[],"url":"https://www.oracle.com/security-alerts/cpujan2020.html"},{"reference_url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","reference_id":"","reference_type":"","scores":[],"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"},{"reference_url":"http://www.securityfocus.com/bid/106357","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/106357"},{"reference_url":"http://www.securitytracker.com/id/1041199","reference_id":"","reference_type":"","scores":[],"url":"http://www.securitytracker.com/id/1041199"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8039","reference_id":"CVE-2018-8039","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8039"},{"reference_url":"https://cxf.apache.org/security-advisories.data/CVE-2018-8039.txt.asc","reference_id":"CVE-2018-8039.TXT.ASC","reference_type":"","scores":[],"url":"https://cxf.apache.org/security-advisories.data/CVE-2018-8039.txt.asc"},{"reference_url":"https://github.com/advisories/GHSA-jc7r-v6fg-2gpf","reference_id":"GHSA-jc7r-v6fg-2gpf","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-jc7r-v6fg-2gpf"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/54979?format=json","purl":"pkg:maven/org.apache.cxf/cxf-core@3.1.16","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ttsv-cwyg-xkfq"},{"vulnerability":"VCID-zycn-qk4q-5bh2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.1.16"},{"url":"http://public2.vulnerablecode.io/api/packages/54980?format=json","purl":"pkg:maven/org.apache.cxf/cxf-core@3.2.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6t4y-ukp3-9yef"},{"vulnerability":"VCID-ttsv-cwyg-xkfq"},{"vulnerability":"VCID-ycx8-cu33-nkc8"},{"vulnerability":"VCID-zycn-qk4q-5bh2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.2.5"}],"aliases":["CVE-2018-8039","GHSA-jc7r-v6fg-2gpf"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7fq3-e3fs-zfhp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/9846?format=json","vulnerability_id":"VCID-7mcr-wanr-2qbq","summary":"","references":[{"reference_url":"https://access.redhat.com/errata/RHSA-2017:0868","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:0868"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-6812","reference_id":"","reference_type":"","scores":[{"value":"0.08591","scoring_system":"epss","scoring_elements":"0.92544","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-6812"},{"reference_url":"https://github.com/apache/cxf/commit/1be97cb1","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/cxf/commit/1be97cb1"},{"reference_url":"https://github.com/apache/cxf/commit/1be97cb13aef121b799b1be4d9793c0e8b925a12","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/cxf/commit/1be97cb13aef121b799b1be4d9793c0e8b925a12"},{"reference_url":"https://github.com/apache/cxf/commit/1f824d80","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/cxf/commit/1f824d80"},{"reference_url":"https://github.com/apache/cxf/commit/1f824d8039c7a42a4aa46f844e6c800e1143c7e7","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/cxf/commit/1f824d8039c7a42a4aa46f844e6c800e1143c7e7"},{"reference_url":"https://github.com/apache/cxf/commit/32e89366","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/cxf/commit/32e89366"},{"reference_url":"https://github.com/apache/cxf/commit/32e89366e2daa5670ac7a5c5c19f0bf9329a4c1e","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/cxf/commit/32e89366e2daa5670ac7a5c5c19f0bf9329a4c1e"},{"reference_url":"https://github.com/apache/cxf/commit/45b1b5b9","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/cxf/commit/45b1b5b9"},{"reference_url":"https://github.com/apache/cxf/commit/a23c615b","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/cxf/commit/a23c615b"},{"reference_url":"https://github.com/apache/cxf/commit/a30397b0","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/cxf/commit/a30397b0"},{"reference_url":"https://issues.apache.org/jira/browse/CXF-6216","reference_id":"","reference_type":"","scores":[],"url":"https://issues.apache.org/jira/browse/CXF-6216"},{"reference_url":"https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"http://www.securityfocus.com/bid/97582","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/97582"},{"reference_url":"http://www.securitytracker.com/id/1037543","reference_id":"","reference_type":"","scores":[],"url":"http://www.securitytracker.com/id/1037543"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6812","reference_id":"CVE-2016-6812","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6812"},{"reference_url":"http://cxf.apache.org/security-advisories.data/CVE-2016-6812.txt.asc","reference_id":"CVE-2016-6812.TXT.ASC","reference_type":"","scores":[],"url":"http://cxf.apache.org/security-advisories.data/CVE-2016-6812.txt.asc"},{"reference_url":"https://github.com/advisories/GHSA-vw2c-5wph-v92r","reference_id":"GHSA-vw2c-5wph-v92r","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-vw2c-5wph-v92r"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/61048?format=json","purl":"pkg:maven/org.apache.cxf/cxf-core@3.0.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7fq3-e3fs-zfhp"},{"vulnerability":"VCID-aruv-kfjk-v7ha"},{"vulnerability":"VCID-ntbm-eta4-fygn"},{"vulnerability":"VCID-ttsv-cwyg-xkfq"},{"vulnerability":"VCID-zycn-qk4q-5bh2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.0.12"},{"url":"http://public2.vulnerablecode.io/api/packages/61049?format=json","purl":"pkg:maven/org.apache.cxf/cxf-core@3.1.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7fq3-e3fs-zfhp"},{"vulnerability":"VCID-ttsv-cwyg-xkfq"},{"vulnerability":"VCID-zycn-qk4q-5bh2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.1.9"}],"aliases":["CVE-2016-6812","GHSA-vw2c-5wph-v92r"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7mcr-wanr-2qbq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/137977?format=json","vulnerability_id":"VCID-ttsv-cwyg-xkfq","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2019-12406","reference_id":"","reference_type":"","scores":[{"value":"0.04134","scoring_system":"epss","scoring_elements":"0.88832","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2019-12406"},{"reference_url":"https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r92238967ba2783d3ab5a483f2e17f5fdaa8ace98990f69f9e8e15de0@%3Cissues.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/r92238967ba2783d3ab5a483f2e17f5fdaa8ace98990f69f9e8e15de0@%3Cissues.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rabc395b38acb7f2465bfbf0bc16d6e1e95720c89bea87abe8808eeea@%3Cissues.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rabc395b38acb7f2465bfbf0bc16d6e1e95720c89bea87abe8808eeea@%3Cissues.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rb2a6dab1f781f55326543c56dc29ea677759439ddfeba920c83037e6@%3Cissues.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rb2a6dab1f781f55326543c56dc29ea677759439ddfeba920c83037e6@%3Cissues.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rca465c9d1e1969281338522b76701c85a07abd045c494261137236e0@%3Cissues.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rca465c9d1e1969281338522b76701c85a07abd045c494261137236e0@%3Cissues.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://www.oracle.com/security-alerts/cpuapr2020.html","reference_id":"","reference_type":"","scores":[],"url":"https://www.oracle.com/security-alerts/cpuapr2020.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpuApr2021.html","reference_id":"","reference_type":"","scores":[],"url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpujan2020.html","reference_id":"","reference_type":"","scores":[],"url":"https://www.oracle.com/security-alerts/cpujan2020.html"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12406","reference_id":"CVE-2019-12406","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12406"},{"reference_url":"http://cxf.apache.org/security-advisories.data/CVE-2019-12406.txt.asc","reference_id":"CVE-2019-12406.TXT.ASC","reference_type":"","scores":[],"url":"http://cxf.apache.org/security-advisories.data/CVE-2019-12406.txt.asc"},{"reference_url":"https://github.com/advisories/GHSA-58p8-9g59-q2hr","reference_id":"GHSA-58p8-9g59-q2hr","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-58p8-9g59-q2hr"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/148059?format=json","purl":"pkg:maven/org.apache.cxf/cxf-core@3.2.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ycx8-cu33-nkc8"},{"vulnerability":"VCID-zycn-qk4q-5bh2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.2.11"},{"url":"http://public2.vulnerablecode.io/api/packages/148064?format=json","purl":"pkg:maven/org.apache.cxf/cxf-core@3.3.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ycx8-cu33-nkc8"},{"vulnerability":"VCID-zycn-qk4q-5bh2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.3.4"}],"aliases":["CVE-2019-12406","GHSA-58p8-9g59-q2hr"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ttsv-cwyg-xkfq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/137985?format=json","vulnerability_id":"VCID-zycn-qk4q-5bh2","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2019-12423","reference_id":"","reference_type":"","scores":[{"value":"0.01164","scoring_system":"epss","scoring_elements":"0.78936","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2019-12423"},{"reference_url":"https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rd588ff96f18563aeb5f87ac8c6bce7aae86cb1a4d4be483f96e7208c@%3Cannounce.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rd588ff96f18563aeb5f87ac8c6bce7aae86cb1a4d4be483f96e7208c@%3Cannounce.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://www.oracle.com/security-alerts/cpuApr2021.html","reference_id":"","reference_type":"","scores":[],"url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpujul2020.html","reference_id":"","reference_type":"","scores":[],"url":"https://www.oracle.com/security-alerts/cpujul2020.html"},{"reference_url":"https://www.oracle.com/security-alerts/cpuoct2020.html","reference_id":"","reference_type":"","scores":[],"url":"https://www.oracle.com/security-alerts/cpuoct2020.html"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12423","reference_id":"CVE-2019-12423","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12423"},{"reference_url":"http://cxf.apache.org/security-advisories.data/CVE-2019-12423.txt.asc?version=1&modificationDate=1579178393000&api=v2","reference_id":"CVE-2019-12423.TXT.ASC?VERSION=1&MODIFICATIONDATE=1579178393000&API=V2","reference_type":"","scores":[],"url":"http://cxf.apache.org/security-advisories.data/CVE-2019-12423.txt.asc?version=1&modificationDate=1579178393000&api=v2"},{"reference_url":"https://github.com/advisories/GHSA-42f2-f9vc-6365","reference_id":"GHSA-42f2-f9vc-6365","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-42f2-f9vc-6365"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/152195?format=json","purl":"pkg:maven/org.apache.cxf/cxf-core@3.2.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ycx8-cu33-nkc8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.2.12"},{"url":"http://public2.vulnerablecode.io/api/packages/152198?format=json","purl":"pkg:maven/org.apache.cxf/cxf-core@3.3.5","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.3.5"}],"aliases":["CVE-2019-12423","GHSA-42f2-f9vc-6365"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zycn-qk4q-5bh2"}],"fixing_vulnerabilities":[],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.0.11"}