Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.0.12
purl pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.0.12
Next non-vulnerable version 3.0.13
Latest non-vulnerable version 3.3.5
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
CVE-2017-5656

Session Fixation Apache CXF's STSClient uses a flawed way of caching tokens that are associated with delegation tokens, which means …
3.1.11
Not vulnerable
3.0.13
Not vulnerable
3.1.11
Not vulnerable
3.0.13
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2012-5633
The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security …