Skip to content
OpenAdvisories

Package · Maven

org.apache.cxf:cxf-core

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-49875

    Apache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtils

    Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening configurations, enabling out-of-band (OOB) external entity resolution. Users are recommended to upgrade to versions 4.2.2 o…

    Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven
  • Medium 5.6
    CVE-2025-48795

    Apache CXF: Denial of Service and sensitive data exposure in logs

    Apache CXF stores large stream based messages as temporary files on the local filesystem. A bug was introduced which means that the entire temporary file is read into memory and then logged. An attacker might be able to exploit this to cause a denial of servi…

    Apache Software Foundation Apache CXF wildfly-openjdk-21 wildfly-openjdk-17 Wolfi Maven
  • Medium 5.9
    CVE-2025-23184

    Apache CXF: Denial of Service vulnerability with temporary files

    A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6. In some edge cases, the CachedOutputStream instances may not be closed and, if backed by temporary files, may fill up the file system (it applies …

    Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven
  • Medium 5.5
    CVE-2017-12624 Public exploit

    Improper Input Validation in Apache CXF

    Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to craft a message attachment header that could lead to a Denial of Service (DoS) attack on a CXF web service provider. Both JAX-WS and JAX-RS…

    Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven
  • Medium 6.1
    CVE-2016-6812 Public exploit

    Improper Neutralization of Input During Web Page Generation in Apache CXF

    The HTTP transport module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 uses FormattedServiceListWriter to provide an HTML page which lists the names and absolute URL addresses of the available service endpoints. The module calculates the base URL us…

    Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven
  • Medium 5.3
    CVE-2017-5653 EPSS 11%

    Improper Certificate Validation in Apache CXF

    JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers.

    Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven
  • Medium —
    CVE-2014-0035

    Cleartext Transmission of Sensitive Information in Apache CXF

    The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtai…

    org.apache.cxf:cxf-core Maven
  • Medium —
    CVE-2014-0109

    Uncontrolled Resource Consumption in Apache CXF

    Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error.

    org.apache.cxf:cxf-core Maven
  • Medium —
    CVE-2014-0110

    Uncontrolled Resource Consumption in Apache CXF

    Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message.

    org.apache.cxf:cxf-core Maven