Search for packages
purl | pkg:maven/org.apache.cxf/cxf-core@3.2.5 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-6b2t-76tu-aaaa
Aliases: CVE-2024-28752 GHSA-qmgx-j96g-4428 |
A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of other data bindings (including the default databinding) are not impacted. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
VCID-emyk-3hx9-aaaq
Aliases: CVE-2019-12419 GHSA-cw6w-q88j-6mqf |
Potential session hijack in Apache CXF |
Affected by 9 other vulnerabilities. Affected by 9 other vulnerabilities. |
VCID-eqe5-wr57-aaar
Aliases: CVE-2022-46363 GHSA-3w37-5p3p-jv92 |
Apache CXF vulnerable to Exposure of Sensitive Information |
Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. |
VCID-f72h-mwvx-aaaq
Aliases: CVE-2019-17573 GHSA-f93p-f762-vr53 |
Reflected Cross-Site Scripting in Apache CXF |
Affected by 6 other vulnerabilities. Affected by 7 other vulnerabilities. |
VCID-gtfj-ry3n-aaae
Aliases: CVE-2020-13954 GHSA-64x2-gq24-75pv |
Cross-site scripting in Apache CXF |
Affected by 5 other vulnerabilities. Affected by 5 other vulnerabilities. |
VCID-h2se-g2gp-77fk
Aliases: CVE-2025-23184 GHSA-fh5r-crhr-qrrq |
org.apache.cxf: Apache CXF: Denial of Service vulnerability with temporary files |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-shw4-mwht-aaan
Aliases: CVE-2022-46364 GHSA-x3x3-qwjq-8gj4 |
Apache CXF Server-Side Request Forgery vulnerability |
Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. |
VCID-v7tx-bnp9-aaag
Aliases: CVE-2019-12423 GHSA-42f2-f9vc-6365 |
Private key leak in Apache CXF |
Affected by 8 other vulnerabilities. Affected by 7 other vulnerabilities. |
VCID-za5z-5gde-aaaj
Aliases: CVE-2019-12406 GHSA-58p8-9g59-q2hr |
Potential DOS attack due to unrestricted attachment count in messages |
Affected by 9 other vulnerabilities. Affected by 9 other vulnerabilities. |
VCID-zggp-qr1y-aaaf
Aliases: CVE-2021-22696 GHSA-7q4h-pj78-j7vg |
Authorization service vulnerable to DDos attacks in Apache CFX |
Affected by 4 other vulnerabilities. Affected by 4 other vulnerabilities. |
VCID-zncz-6mqe-aaan
Aliases: CVE-2020-1954 GHSA-ffm7-7r8g-77xm |
Exposure of Sensitive Information to an Unauthorized Actor in Apache CXF |
Affected by 6 other vulnerabilities. Affected by 6 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
VCID-krfe-wrvk-aaap | High severity vulnerability that affects org.apache.cxf:apache-cxf, org.apache.cxf:apache-cxf , and org.apache.cxf:cxf |
CVE-2018-8039
GHSA-jc7r-v6fg-2gpf |