Skip to content
OpenAdvisories

Package · Maven

org.apache.cxf:cxf-rt-transports-http

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-41172

    Apache CXF: Unrestricted memory consumption in CXF HTTP clients

    In versions of Apache CXF before 3.6.4 and 4.0.5 (3.5.x and lower versions are not impacted), a CXF HTTP client conduit may prevent HTTPClient instances from being garbage collected and it is possible that memory consumption will continue to increase, eventua…

    Apache Software Foundation Apache CXF org.apache.cxf:cxf-rt-transports-http Maven
  • Medium —
    CVE-2012-5575 Public exploit

    Inadequate Encryption Strength in Apache CXF

    Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definition before decrypting, which allows remote attackers to force…

    org.apache.cxf:cxf-rt-transports-http Maven