Search for packages
Package details: pkg:maven/org.apache.cxf/cxf-rt-ws-security@2.7.0
purl pkg:maven/org.apache.cxf/cxf-rt-ws-security@2.7.0
Next non-vulnerable version 2.7.9
Latest non-vulnerable version 3.1.11
Risk 4.5
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-7uaz-br64-aaar
Aliases:
CVE-2014-0034
GHSA-38x2-fp9m-87mx
CVE-2014-0034 Apache CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid
2.7.9
Affected by 0 other vulnerabilities.
VCID-bd4x-va5p-aaar
Aliases:
CVE-2012-5633
GHSA-xf9f-32gh-h2w4
Bypass of security constraints on WS endpoints when using WSS4JInInterceptor The `URIMappingInterceptor` in this package bypasses `WS-Security` processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request.
2.7.2
Affected by 2 other vulnerabilities.
VCID-m6hu-ghyn-aaan
Aliases:
CVE-2013-0239
GHSA-p5c5-6564-vvr8
UsernameTokenPolicyValidator and UsernameTokenInterceptor allow empty passwords to authenticate When the plaintext UsernameToken WS-SecurityPolicy is enabled, allows remote attackers to bypass authentication via a security header of a SOAP request containing a UsernameToken element that lacks a password child element.
2.7.3
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T15:41:19.318439+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar None 36.1.3
2025-06-20T15:40:07.272498+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2014-0034.yml 36.1.3
2025-06-20T13:45:43.045206+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2012-5633.yml 36.1.3
2025-06-20T13:45:42.974280+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan None 36.1.3
2025-06-20T13:45:42.894446+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2013-0239.yml 36.1.3
2025-06-20T13:45:42.809130+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar None 36.1.3
2025-06-03T22:21:35.682579+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar None 36.1.0
2025-06-03T22:20:23.452080+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2014-0034.yml 36.1.0
2025-06-03T20:36:36.542026+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2012-5633.yml 36.1.0
2025-06-03T20:36:36.479867+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan None 36.1.0
2025-06-03T20:36:36.403925+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2013-0239.yml 36.1.0
2025-06-03T20:36:36.325311+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar None 36.1.0
2025-06-02T22:10:29.471446+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar None 36.1.2
2025-06-02T22:09:11.571078+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2014-0034.yml 36.1.2
2025-06-02T20:15:49.022915+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2012-5633.yml 36.1.2
2025-06-02T20:15:48.958634+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan None 36.1.2
2025-06-02T20:15:48.879401+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2013-0239.yml 36.1.2
2025-06-02T20:15:48.787973+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar None 36.1.2
2025-04-03T19:39:11.421762+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar None 36.0.0
2025-04-03T19:37:03.307624+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2014-0034.yml 36.0.0
2025-04-03T16:23:16.333106+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2012-5633.yml 36.0.0
2025-04-03T16:23:16.136567+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan None 36.0.0
2025-04-03T16:23:15.888854+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2013-0239.yml 36.0.0
2025-04-03T16:23:15.640889+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar None 36.0.0
2025-02-18T04:38:08.837916+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar None 35.1.0
2025-02-18T04:38:08.269677+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2014-0034.yml 35.1.0
2025-02-17T22:16:56.470073+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2013-0239.yml 35.1.0
2025-02-17T22:16:56.227764+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan None 35.1.0
2025-02-17T22:16:27.122622+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar None 35.1.0
2025-02-17T22:16:26.936257+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2012-5633.yml 35.1.0
2025-01-17T02:29:20.932679+00:00 GHSA Importer Affected by VCID-7uaz-br64-aaar None 35.1.0
2024-11-21T01:33:12.127715+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2014-0034.yml 35.0.0
2024-11-20T21:52:48.641116+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2013-0239.yml 35.0.0
2024-11-20T21:52:36.603152+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2012-5633.yml 35.0.0
2024-11-19T01:12:18.244335+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2014-0034.yml 34.3.2
2024-11-18T21:50:09.707921+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2013-0239.yml 34.3.2
2024-11-18T21:50:00.340501+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2012-5633.yml 34.3.2
2024-10-08T01:48:12.902554+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2014-0034.yml 34.0.2
2024-10-07T22:49:30.538048+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2013-0239.yml 34.0.2
2024-10-07T22:49:18.861970+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2012-5633.yml 34.0.2
2024-10-07T16:46:24.987514+00:00 GHSA Importer Affected by VCID-7uaz-br64-aaar https://github.com/advisories/GHSA-38x2-fp9m-87mx 34.0.2
2024-09-22T23:04:56.091735+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2012-5633.yml 34.0.1
2024-09-17T22:37:35.249998+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2013-0239.yml 34.0.1
2024-09-17T22:37:35.015081+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2014-0034.yml 34.0.1
2024-09-17T22:01:37.931832+00:00 GHSA Importer Affected by VCID-7uaz-br64-aaar https://github.com/advisories/GHSA-38x2-fp9m-87mx 34.0.1
2024-04-24T04:10:36.793455+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar None 34.0.0rc4
2024-04-24T04:10:36.190731+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2014-0034.yml 34.0.0rc4
2024-04-24T00:55:21.945830+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2013-0239.yml 34.0.0rc4
2024-04-24T00:55:21.676894+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan None 34.0.0rc4
2024-04-24T00:55:00.076792+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar None 34.0.0rc4
2024-04-24T00:54:59.869642+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2012-5633.yml 34.0.0rc4
2024-04-23T17:59:50.790828+00:00 GHSA Importer Affected by VCID-7uaz-br64-aaar https://github.com/advisories/GHSA-38x2-fp9m-87mx 34.0.0rc4
2024-04-23T17:59:49.887466+00:00 GHSA Importer Affected by VCID-7uaz-br64-aaar None 34.0.0rc4
2024-01-10T06:46:39.016607+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar None 34.0.0rc2
2024-01-10T06:46:38.424714+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2014-0034.yml 34.0.0rc2
2024-01-10T03:18:59.749865+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2013-0239.yml 34.0.0rc2
2024-01-10T03:18:59.480007+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan None 34.0.0rc2
2024-01-10T03:18:39.094176+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar None 34.0.0rc2
2024-01-10T03:18:38.878363+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2012-5633.yml 34.0.0rc2
2024-01-09T19:56:13.496080+00:00 GHSA Importer Affected by VCID-7uaz-br64-aaar https://github.com/advisories/GHSA-38x2-fp9m-87mx 34.0.0rc2
2024-01-09T19:56:12.627667+00:00 GHSA Importer Affected by VCID-7uaz-br64-aaar None 34.0.0rc2
2024-01-03T23:32:59.561022+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar None 34.0.0rc1
2024-01-03T19:56:38.100375+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan None 34.0.0rc1
2024-01-03T19:56:17.560761+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar None 34.0.0rc1
2024-01-03T19:56:17.349076+00:00 GitLab Importer Affected by VCID-bd4x-va5p-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2012-5633.yml 34.0.0rc1
2024-01-03T18:00:29.342583+00:00 GitLab Importer Affected by VCID-m6hu-ghyn-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2013-0239.yml 34.0.0rc1
2024-01-03T18:00:29.116797+00:00 GitLab Importer Affected by VCID-7uaz-br64-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-ws-security/CVE-2014-0034.yml 34.0.0rc1
2024-01-03T17:36:30.232904+00:00 GHSA Importer Affected by VCID-7uaz-br64-aaar https://github.com/advisories/GHSA-38x2-fp9m-87mx 34.0.0rc1
2024-01-03T15:25:03.363624+00:00 GHSA Importer Affected by VCID-7uaz-br64-aaar None 34.0.0rc1