pkg:Maven/org.apache.cxf:cxf

12 total CVEsCRITICAL2HIGH3MEDIUM3

✅ Check your installed version

All known vulnerabilities

  • CRITICAL9.8CVE-2012-0803Improper Authentication in Apache CXF
    >= 2.4.0, < 2.4.6
  • CRITICAL9.8CVE-2019-12419Potential session hijack in Apache CXF
    from 0, < 3.2.11
  • HIGH7.5CVE-2021-30468Infinite loop in Apache CFX
    >= 3.4.0, < 3.4.4
  • HIGH7.5CVE-2021-22696Authorization service vulnerable to DDos attacks in Apache CFX
    >= 3.4.0, < 3.4.3
  • HIGH7.5CVE-2019-12423Private key leak in Apache CXF
    from 0, < 3.2.12
  • MEDIUM6.5CVE-2019-12406Potential DOS attack due to unrestricted attachment count in messages
    from 0, < 3.2.11
  • MEDIUM6.1CVE-2020-13954Cross-site scripting in Apache CXF
    from 0, < 3.3.8
  • MEDIUM6.1CVE-2019-17573Reflected Cross-Site Scripting in Apache CXF
    from 0, < 3.2.12
  • —CVE-2012-2379XML Signature/Encryption Not Validated in Apache CXF
    >= 2.4.0, < 2.4.8
  • —CVE-2012-2378Improper Authentication in Apache CXF
    >= 2.4.5, < 2.4.8
  • —CVE-2012-5633Improper Authentication in Apache CXF
    from 0, < 2.5.8
  • —CVE-2012-3451Remote web-service operation execution in Apache CXF
    from 0, < 2.4.9