Search for packages
purl | pkg:maven/org.apache.cxf/cxf-api@2.6.5 |
Next non-vulnerable version | None. |
Latest non-vulnerable version | None. |
Risk | 10.0 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-gtfj-ry3n-aaae
Aliases: CVE-2020-13954 GHSA-64x2-gq24-75pv |
Cross-site scripting in Apache CXF |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-su1r-fv61-aaap
Aliases: CVE-2013-2160 GHSA-254q-rp36-v2m8 |
Denial of Service Attacks on Apache CXF The streaming XML parser in this package remote attackers to cause a denial of service (CPU and memory consumption) via crafted XML with a large number of elements, attributes, nested constructs, and possibly other vectors. |
Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. |
VCID-zggp-qr1y-aaaf
Aliases: CVE-2021-22696 GHSA-7q4h-pj78-j7vg |
Authorization service vulnerable to DDos attacks in Apache CFX | There are no reported fixed by versions. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |