Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache CXF

56 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2017-12624 Public exploit

    Improper Input Validation in Apache CXF

    Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to craft a message attachment header that could lead to a Denial of Service (DoS) attack on a CXF web service provider. Both JAX-WS and JAX-RS…

    Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven
  • Medium 6.1
    CVE-2016-6812 Public exploit

    Improper Neutralization of Input During Web Page Generation in Apache CXF

    The HTTP transport module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 uses FormattedServiceListWriter to provide an HTML page which lists the names and absolute URL addresses of the available service endpoints. The module calculates the base URL us…

    Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven