Search for packages
| purl | pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.1.11 |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2012-5633
|
The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security … | |
|
CVE-2017-5656
|
Session Fixation Apache CXF's STSClient uses a flawed way of caching tokens that are associated with delegation tokens, which means … |