Search for packages
Package details: pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.1.3
purl pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.1.3
Next non-vulnerable version 3.3.10
Latest non-vulnerable version 4.0.5
Risk 4.5
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-gjyt-m1m5-aaas
Aliases:
CVE-2016-6812
GHSA-vw2c-5wph-v92r
Cross-site Scripting The HTTP transport module in Apache CXF uses `FormattedServiceListWriter` to provide an HTML page which lists the names and absolute URL addresses of the available service endpoints. The module calculates the base URL using the current `HttpServletRequest` which is used by `FormattedServiceListWriter` to build the service endpoint absolute URLs. If the unexpected matrix parameters have been injected into the request URL then these matrix parameters will find their way back to the client in the services list page which represents an XSS risk to the client.
3.1.9
Affected by 2 other vulnerabilities.
VCID-gtfj-ry3n-aaae
Aliases:
CVE-2020-13954
GHSA-64x2-gq24-75pv
Cross-site scripting in Apache CXF
3.3.8
Affected by 1 other vulnerability.
3.4.1
Affected by 1 other vulnerability.
VCID-zggp-qr1y-aaaf
Aliases:
CVE-2021-22696
GHSA-7q4h-pj78-j7vg
Authorization service vulnerable to DDos attacks in Apache CFX
3.3.10
Affected by 0 other vulnerabilities.
3.4.3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T15:00:47.833478+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf None 36.1.3
2025-06-20T15:00:45.637567+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2021-22696.yml 36.1.3
2025-06-20T14:53:16.710777+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2020-13954.yml 36.1.3
2025-06-20T14:53:12.678431+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae None 36.1.3
2025-06-20T13:55:25.227778+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2016-6812.yml 36.1.3
2025-06-20T13:55:24.168225+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas None 36.1.3
2025-06-03T21:44:02.938514+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf None 36.1.0
2025-06-03T21:44:01.023074+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2021-22696.yml 36.1.0
2025-06-03T21:36:55.798489+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2020-13954.yml 36.1.0
2025-06-03T21:36:50.795523+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae None 36.1.0
2025-06-03T20:47:20.952522+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2016-6812.yml 36.1.0
2025-06-03T20:47:19.852052+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas None 36.1.0
2025-06-02T21:27:39.664603+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf None 36.1.2
2025-06-02T21:27:37.255752+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2021-22696.yml 36.1.2
2025-06-02T21:19:30.287734+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2020-13954.yml 36.1.2
2025-06-02T21:19:25.523837+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae None 36.1.2
2025-06-02T20:26:56.801280+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2016-6812.yml 36.1.2
2025-06-02T20:26:55.555291+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas None 36.1.2
2025-04-03T18:17:20.123414+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf None 36.0.0
2025-04-03T18:17:14.005805+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2021-22696.yml 36.0.0
2025-04-03T18:02:30.974044+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2020-13954.yml 36.0.0
2025-04-03T18:02:22.505782+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae None 36.0.0
2025-04-03T16:40:28.650600+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2016-6812.yml 36.0.0
2025-04-03T16:40:25.772455+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas None 36.0.0
2025-02-18T00:02:48.718815+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf None 35.1.0
2025-02-18T00:02:44.281614+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2021-22696.yml 35.1.0
2025-02-17T23:33:15.611667+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae None 35.1.0
2025-02-17T23:33:11.166650+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2020-13954.yml 35.1.0
2025-02-17T22:30:10.986336+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas None 35.1.0
2025-02-17T22:30:10.262817+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2016-6812.yml 35.1.0
2024-11-20T22:59:07.338830+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2021-22696.yml 35.0.0
2024-11-20T22:37:46.706893+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2020-13954.yml 35.0.0
2024-11-20T21:57:49.883269+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2016-6812.yml 35.0.0
2024-11-18T22:45:45.414107+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2021-22696.yml 34.3.2
2024-11-18T22:29:01.787257+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2020-13954.yml 34.3.2
2024-11-18T21:55:02.650824+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2016-6812.yml 34.3.2
2024-10-07T23:45:59.039781+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2021-22696.yml 34.0.2
2024-10-07T23:29:43.162839+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2020-13954.yml 34.0.2
2024-10-07T22:55:09.663962+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2016-6812.yml 34.0.2
2024-09-23T00:00:15.136762+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2021-22696.yml 34.0.1
2024-09-22T23:43:45.532661+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2020-13954.yml 34.0.1
2024-09-22T23:10:31.648835+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2016-6812.yml 34.0.1
2024-04-24T02:02:55.216320+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf None 34.0.0rc4
2024-04-24T02:02:52.228911+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2021-22696.yml 34.0.0rc4
2024-04-24T01:44:57.900470+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae None 34.0.0rc4
2024-04-24T01:44:55.447226+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2020-13954.yml 34.0.0rc4
2024-04-24T01:05:34.916518+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas None 34.0.0rc4
2024-04-24T01:05:34.193991+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2016-6812.yml 34.0.0rc4
2024-01-10T04:35:40.145870+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf None 34.0.0rc2
2024-01-10T04:35:37.190218+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2021-22696.yml 34.0.0rc2
2024-01-10T04:16:02.983165+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae None 34.0.0rc2
2024-01-10T04:16:00.529641+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2020-13954.yml 34.0.0rc2
2024-01-10T03:31:25.338293+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas None 34.0.0rc2
2024-01-10T03:31:24.568500+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2016-6812.yml 34.0.0rc2
2024-01-03T21:22:28.645980+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf None 34.0.0rc1
2024-01-03T21:22:25.584139+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2021-22696.yml 34.0.0rc1
2024-01-03T21:00:08.818809+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae None 34.0.0rc1
2024-01-03T21:00:06.351171+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2020-13954.yml 34.0.0rc1
2024-01-03T20:07:55.491351+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas None 34.0.0rc1
2024-01-03T20:07:54.730828+00:00 GitLab Importer Affected by VCID-gjyt-m1m5-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-transports-http/CVE-2016-6812.yml 34.0.0rc1