Search for packages
purl | pkg:maven/org.apache.cxf/cxf-api@2.4.3 |
Next non-vulnerable version | None. |
Latest non-vulnerable version | None. |
Risk | 4.5 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-6f55-kdyu-aaac
Aliases: CVE-2012-3451 GHSA-55j7-f5wf-43m4 |
SOAPAction spoofing on document literal web services This package allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action String that is inconsistent with the message body. |
Affected by 2 other vulnerabilities. Affected by 3 other vulnerabilities. Affected by 3 other vulnerabilities. |
VCID-gtfj-ry3n-aaae
Aliases: CVE-2020-13954 GHSA-64x2-gq24-75pv |
Cross-site scripting in Apache CXF |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-zggp-qr1y-aaaf
Aliases: CVE-2021-22696 GHSA-7q4h-pj78-j7vg |
Authorization service vulnerable to DDos attacks in Apache CFX | There are no reported fixed by versions. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |