Skip to content
OpenAdvisories

Package · Maven

org.apache.cxf:cxf

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-12419 EPSS 14%

    Potential session hijack in Apache CXF

    Apache CXF before 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service. There is a vulnerability in the access token services, where it does not validate that the authenticated principal is equal to…

    Apache Apache CXF org.apache.cxf:cxf Maven
  • Critical 9.8
    CVE-2012-0803

    Improper Authentication in Apache CXF

    The WS-SP UsernameToken policy in Apache CXF 2.4.5 and 2.5.1 allows remote attackers to bypass authentication by sending an empty UsernameToken as part of a SOAP request.

    org.apache.cxf:cxf Maven