pkg:Maven/org.apache.cxf:apache-cxf

7 total CVEsHIGH4MEDIUM3

✅ Check your installed version

All known vulnerabilities

  • HIGH8.1CVE-2018-8039Apache CXF TLS hostname verification does not work correctly with com.sun.net.ssl.*
    >= 3.2.0, < 3.2.5
  • HIGH7.5CVE-2021-30468Infinite loop in Apache CFX
    >= 3.4.0, < 3.4.4
  • HIGH7.5CVE-2021-22696Authorization service vulnerable to DDos attacks in Apache CFX
    >= 3.4.0, < 3.4.3
  • HIGH7.5CVE-2019-12423Private key leak in Apache CXF
    from 0, < 3.2.12
  • MEDIUM6.5CVE-2019-12406Potential DOS attack due to unrestricted attachment count in messages
    from 0, < 3.2.11
  • MEDIUM6.1CVE-2020-13954Cross-site scripting in Apache CXF
    from 0, < 3.3.8
  • MEDIUM6.1CVE-2019-17573Reflected Cross-Site Scripting in Apache CXF
    from 0, < 3.2.12