Search for packages
| purl | pkg:maven/org.apache.cxf/apache-cxf@2.2.5 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-64x2-gq24-75pv
Aliases: CVE-2020-13954 |
Cross-site scripting in Apache CXF By default, Apache CXF creates a /services page containing a listing of the available endpoint … |
Vulnerable |
|
GHSA-7q4h-pj78-j7vg
Aliases: CVE-2021-22696 |
Authorization service vulnerable to DDos attacks in Apache CFX CXF supports (via JwtRequestCodeFilter) passing OAuth 2 parameters via a JWT … |
Vulnerable |
|
GHSA-g23v-p5jq-jvh4
Aliases: CVE-2021-30468 |
Infinite loop in Apache CFX A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON … |
Not vulnerable |
|
GHSA-58p8-9g59-q2hr
Aliases: CVE-2019-12406 |
Potential DOS attack due to unrestricted attachment count in messages Apache CXF before 3.3.4 and 3.2.11 does not restrict the … |
Vulnerable |
|
GHSA-f93p-f762-vr53
Aliases: CVE-2019-17573 |
Reflected Cross-Site Scripting in Apache CXF By default, Apache CXF creates a /services page containing a listing of the available … |
Vulnerable |
|
GHSA-42f2-f9vc-6365
Aliases: CVE-2019-12423 |
Private key leak in Apache CXF Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client … |
Vulnerable |
|
GHSA-jc7r-v6fg-2gpf
Aliases: CVE-2018-8039 |
Apache CXF TLS hostname verification does not work correctly with com.sun.net.ssl.* It is possible to configure Apache CXF to use … |
Vulnerable Vulnerable |