Skip to content
OpenAdvisories

Archive

10 August 2017

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2016-6812 Public exploit

    Improper Neutralization of Input During Web Page Generation in Apache CXF

    The HTTP transport module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 uses FormattedServiceListWriter to provide an HTML page which lists the names and absolute URL addresses of the available service endpoints. The module calculates the base URL us…