Skip to content
OpenAdvisories

Package · Maven

org.apache.cxf:cxf-rt-frontend-jaxrs

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium —
    CVE-2014-3584

    Loop with Unreachable Exit Condition in Apache CXF

    The SamlHeaderInHandler in Apache CXF before 2.6.11, 2.7.x before 2.7.8, and 3.0.x before 3.0.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted SAML token in the authorization header of a request to a JAX-RS service.

    org.apache.cxf:cxf-rt-frontend-jaxrs Maven
  • Medium —
    CVE-2013-2160 Public exploit EPSS 32%

    Missing XML Validation in Apache CXF

    The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via crafted XML with a large number of (1) elements, (2) attributes, (3) n…

    org.apache.cxf:cxf-rt-frontend-jaxrs Maven
  • Medium —
    CVE-2013-0239

    Improper Authentication in Apache CXF

    Apache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext UsernameToken WS-SecurityPolicy is enabled, allows remote attackers to bypass authentication via a security header of a SOAP request containing a UsernameToken element tha…

    org.apache.cxf:cxf-rt-frontend-jaxrs Maven
  • High —
    CVE-2010-2076

    Improper Input Validation in Apache CXF

    Apache CXF 2.0.x before 2.0.13, 2.1.x before 2.1.10, and 2.2.x before 2.2.9, as used in Apache ServiceMix, Apache Camel, Apache Chemistry, Apache jUDDI, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows remote a…

    org.apache.cxf:cxf-rt-frontend-jaxrs Maven