Skip to content
OpenAdvisories

Product · Apache

Apache CXF

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2019-12419 EPSS 14%

    Potential session hijack in Apache CXF

    Apache CXF before 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service. There is a vulnerability in the access token services, where it does not validate that the authenticated principal is equal to…

    Apache Apache CXF org.apache.cxf:cxf Maven