Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache CXF

56 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2024-28752 Public exploit

    Apache CXF SSRF Vulnerability using the Aegis databinding

    A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of other data bindings (including the …

    Apache Software Foundation Apache CXF org.apache.cxf:cxf-rt-databinding-aegis Maven
  • Critical 9.8
    CVE-2022-46364 Public exploit

    Apache CXF SSRF Vulnerability

    A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. 

    Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven