{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/37765?format=json","vulnerability_id":"VCID-4whf-68hm-6be4","summary":"Improper security semantics enforcement of SAML SubjectConfirmation methods\nThis package when using `TransportBinding`, does not properly enforce the SAML `SubjectConfirmation` method security semantics, which allows remote attackers to conduct spoofing attacks via unspecified vectors.","aliases":[{"alias":"CVE-2014-3623"},{"alias":"GHSA-99v3-9x35-c5vf"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/52020?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@2.7.13","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@2.7.13"},{"url":"http://public2.vulnerablecode.io/api/packages/52021?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@3.0.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@3.0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/52024?format=json","purl":"pkg:maven/org.apache.wss4j/wss4j@2.0.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wss4j/wss4j@2.0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/62472?format=json","purl":"pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.0.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/62473?format=json","purl":"pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@3.0.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@3.0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/52015?format=json","purl":"pkg:maven/org.apache.ws.security/wss4j@1.6.17","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ws.security/wss4j@1.6.17"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/52016?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@2-alpha0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@2-alpha0"},{"url":"http://public2.vulnerablecode.io/api/packages/200006?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@2.7.1"},{"url":"http://public2.vulnerablecode.io/api/packages/200007?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@2.7.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@2.7.2"},{"url":"http://public2.vulnerablecode.io/api/packages/200008?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@2.7.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@2.7.3"},{"url":"http://public2.vulnerablecode.io/api/packages/200009?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@2.7.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@2.7.4"},{"url":"http://public2.vulnerablecode.io/api/packages/200010?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@2.7.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@2.7.5"},{"url":"http://public2.vulnerablecode.io/api/packages/200011?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@2.7.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@2.7.6"},{"url":"http://public2.vulnerablecode.io/api/packages/200012?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@2.7.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@2.7.7"},{"url":"http://public2.vulnerablecode.io/api/packages/200013?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@2.7.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@2.7.8"},{"url":"http://public2.vulnerablecode.io/api/packages/200014?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@2.7.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@2.7.9"},{"url":"http://public2.vulnerablecode.io/api/packages/200015?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@2.7.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@2.7.10"},{"url":"http://public2.vulnerablecode.io/api/packages/200016?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@2.7.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@2.7.11"},{"url":"http://public2.vulnerablecode.io/api/packages/52017?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@2.7.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@2.7.12"},{"url":"http://public2.vulnerablecode.io/api/packages/52018?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@3-alpha0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@3-alpha0"},{"url":"http://public2.vulnerablecode.io/api/packages/200017?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@3.0.0-milestone1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@3.0.0-milestone1"},{"url":"http://public2.vulnerablecode.io/api/packages/200018?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@3.0.0-milestone2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@3.0.0-milestone2"},{"url":"http://public2.vulnerablecode.io/api/packages/200019?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@3.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@3.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/52019?format=json","purl":"pkg:maven/org.apache.cxf/cxf-rt-security@3.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-rt-security@3.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/200021?format=json","purl":"pkg:maven/org.apache.wss4j/wss4j@2.0-beta","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wss4j/wss4j@2.0-beta"},{"url":"http://public2.vulnerablecode.io/api/packages/200022?format=json","purl":"pkg:maven/org.apache.wss4j/wss4j@2.0.0-rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wss4j/wss4j@2.0.0-rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/200023?format=json","purl":"pkg:maven/org.apache.wss4j/wss4j@2.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wss4j/wss4j@2.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/52023?format=json","purl":"pkg:maven/org.apache.wss4j/wss4j@2.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wss4j/wss4j@2.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/575170?format=json","purl":"pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"},{"vulnerability":"VCID-s2q7-ybj4-ubg5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/575171?format=json","purl":"pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@3.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@3.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/62470?format=json","purl":"pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"},{"vulnerability":"VCID-s2q7-ybj4-ubg5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/62471?format=json","purl":"pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@3.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@3.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/199998?format=json","purl":"pkg:maven/org.apache.ws.security/wss4j@1.6.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"},{"vulnerability":"VCID-axqp-xsr5-yqej"},{"vulnerability":"VCID-s2q7-ybj4-ubg5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ws.security/wss4j@1.6.8"},{"url":"http://public2.vulnerablecode.io/api/packages/199999?format=json","purl":"pkg:maven/org.apache.ws.security/wss4j@1.6.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"},{"vulnerability":"VCID-axqp-xsr5-yqej"},{"vulnerability":"VCID-s2q7-ybj4-ubg5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ws.security/wss4j@1.6.9"},{"url":"http://public2.vulnerablecode.io/api/packages/200000?format=json","purl":"pkg:maven/org.apache.ws.security/wss4j@1.6.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"},{"vulnerability":"VCID-axqp-xsr5-yqej"},{"vulnerability":"VCID-s2q7-ybj4-ubg5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ws.security/wss4j@1.6.10"},{"url":"http://public2.vulnerablecode.io/api/packages/200001?format=json","purl":"pkg:maven/org.apache.ws.security/wss4j@1.6.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"},{"vulnerability":"VCID-axqp-xsr5-yqej"},{"vulnerability":"VCID-s2q7-ybj4-ubg5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ws.security/wss4j@1.6.11"},{"url":"http://public2.vulnerablecode.io/api/packages/200002?format=json","purl":"pkg:maven/org.apache.ws.security/wss4j@1.6.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"},{"vulnerability":"VCID-axqp-xsr5-yqej"},{"vulnerability":"VCID-s2q7-ybj4-ubg5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ws.security/wss4j@1.6.12"},{"url":"http://public2.vulnerablecode.io/api/packages/200003?format=json","purl":"pkg:maven/org.apache.ws.security/wss4j@1.6.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"},{"vulnerability":"VCID-axqp-xsr5-yqej"},{"vulnerability":"VCID-s2q7-ybj4-ubg5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ws.security/wss4j@1.6.13"},{"url":"http://public2.vulnerablecode.io/api/packages/200004?format=json","purl":"pkg:maven/org.apache.ws.security/wss4j@1.6.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"},{"vulnerability":"VCID-axqp-xsr5-yqej"},{"vulnerability":"VCID-s2q7-ybj4-ubg5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ws.security/wss4j@1.6.14"},{"url":"http://public2.vulnerablecode.io/api/packages/200005?format=json","purl":"pkg:maven/org.apache.ws.security/wss4j@1.6.15","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"},{"vulnerability":"VCID-axqp-xsr5-yqej"},{"vulnerability":"VCID-s2q7-ybj4-ubg5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ws.security/wss4j@1.6.15"},{"url":"http://public2.vulnerablecode.io/api/packages/52014?format=json","purl":"pkg:maven/org.apache.ws.security/wss4j@1.6.16","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"},{"vulnerability":"VCID-axqp-xsr5-yqej"},{"vulnerability":"VCID-s2q7-ybj4-ubg5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ws.security/wss4j@1.6.16"},{"url":"http://public2.vulnerablecode.io/api/packages/200020?format=json","purl":"pkg:maven/wss4j/wss4j@1.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"},{"vulnerability":"VCID-axqp-xsr5-yqej"},{"vulnerability":"VCID-b263-hw51-qbak"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/wss4j/wss4j@1.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/175380?format=json","purl":"pkg:rpm/redhat/apache-cxf@2.7.12-1.SP1_redhat_5.1.ep6?arch=el7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"},{"vulnerability":"VCID-jd44-nhjx-3yfw"},{"vulnerability":"VCID-mkuu-7x6y-7kc6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/apache-cxf@2.7.12-1.SP1_redhat_5.1.ep6%3Farch=el7"},{"url":"http://public2.vulnerablecode.io/api/packages/175382?format=json","purl":"pkg:rpm/redhat/apache-cxf@2.7.12-1.SP1_redhat_5.1.ep6?arch=el6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"},{"vulnerability":"VCID-jd44-nhjx-3yfw"},{"vulnerability":"VCID-mkuu-7x6y-7kc6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/apache-cxf@2.7.12-1.SP1_redhat_5.1.ep6%3Farch=el6"},{"url":"http://public2.vulnerablecode.io/api/packages/175383?format=json","purl":"pkg:rpm/redhat/apache-cxf@2.7.12-1.SP1_redhat_5.1.ep6?arch=el5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"},{"vulnerability":"VCID-jd44-nhjx-3yfw"},{"vulnerability":"VCID-mkuu-7x6y-7kc6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/apache-cxf@2.7.12-1.SP1_redhat_5.1.ep6%3Farch=el5"},{"url":"http://public2.vulnerablecode.io/api/packages/175381?format=json","purl":"pkg:rpm/redhat/wss4j@1.6.16-2.redhat_3.1.ep6?arch=el7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"},{"vulnerability":"VCID-jd44-nhjx-3yfw"},{"vulnerability":"VCID-mkuu-7x6y-7kc6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/wss4j@1.6.16-2.redhat_3.1.ep6%3Farch=el7"},{"url":"http://public2.vulnerablecode.io/api/packages/175384?format=json","purl":"pkg:rpm/redhat/wss4j@1.6.16-2.redhat_3.1.ep6?arch=el5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"},{"vulnerability":"VCID-jd44-nhjx-3yfw"},{"vulnerability":"VCID-mkuu-7x6y-7kc6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/wss4j@1.6.16-2.redhat_3.1.ep6%3Farch=el5"},{"url":"http://public2.vulnerablecode.io/api/packages/175385?format=json","purl":"pkg:rpm/redhat/wss4j@1.6.16-2.redhat_3.1.ep6?arch=el6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4whf-68hm-6be4"},{"vulnerability":"VCID-jd44-nhjx-3yfw"},{"vulnerability":"VCID-mkuu-7x6y-7kc6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/wss4j@1.6.16-2.redhat_3.1.ep6%3Farch=el6"}],"references":[{"reference_url":"http://rhn.redhat.com/errata/RHSA-2015-0236.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2015-0236.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2015-0675.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2015-0675.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2015-0850.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2015-0850.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2015-0851.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2015-0851.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3623.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3623.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2014-3623","reference_id":"","reference_type":"","scores":[{"value":"0.0249","scoring_system":"epss","scoring_elements":"0.85607","published_at":"2026-06-05T12:55:00Z"},{"value":"0.0249","scoring_system":"epss","scoring_elements":"0.85586","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2014-3623"},{"reference_url":"http://seclists.org/oss-sec/2014/q4/437","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://seclists.org/oss-sec/2014/q4/437"},{"reference_url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/97754","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/97754"},{"reference_url":"https://issues.apache.org/jira/browse/WSS-511","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://issues.apache.org/jira/browse/WSS-511"},{"reference_url":"https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1157304","reference_id":"1157304","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1157304"},{"reference_url":"https://bugzilla.redhat.com/CVE-2014-3623","reference_id":"CVE-2014-3623","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/CVE-2014-3623"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3623","reference_id":"CVE-2014-3623","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3623"},{"reference_url":"http://cxf.apache.org/security-advisories.data/CVE-2014-3623.txt.asc","reference_id":"CVE-2014-3623.TXT.ASC","reference_type":"","scores":[],"url":"http://cxf.apache.org/security-advisories.data/CVE-2014-3623.txt.asc"},{"reference_url":"https://github.com/advisories/GHSA-99v3-9x35-c5vf","reference_id":"GHSA-99v3-9x35-c5vf","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-99v3-9x35-c5vf"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:2019","reference_id":"RHSA-2014:2019","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:2019"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:2020","reference_id":"RHSA-2014:2020","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:2020"},{"reference_url":"https://access.redhat.com/errata/RHSA-2015:0236","reference_id":"RHSA-2015:0236","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2015:0236"},{"reference_url":"https://access.redhat.com/errata/RHSA-2015:0675","reference_id":"RHSA-2015:0675","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2015:0675"},{"reference_url":"https://access.redhat.com/errata/RHSA-2015:0850","reference_id":"RHSA-2015:0850","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2015:0850"},{"reference_url":"https://access.redhat.com/errata/RHSA-2015:0851","reference_id":"RHSA-2015:0851","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2015:0851"}],"weaknesses":[{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."},{"cwe_id":287,"name":"Improper Authentication","description":"When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":347,"name":"Improper Verification of Cryptographic Signature","description":"The product does not verify, or incorrectly verifies, the cryptographic signature for data."}],"exploits":[],"severity_range_score":"4.0 - 6.9","exploitability":"0.5","weighted_severity":"6.2","risk_score":3.1,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-4whf-68hm-6be4"}