Skip to content
OpenAdvisories

Product · Apache

Apache CXF

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2020-1954

    Apache CXF JMX Integration is vulnerable to a MITM attack

    Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘ property of the default InstrumentationManagerImpl is not disabled, then it is vulnerable to a man-in…

    Apache Apache CXF org.apache.cxf:cxf-rt-management Maven