Skip to content
OpenAdvisories

Product · Apache

CXF

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2019-17573 Public exploit

    Reflected Cross-Site Scripting in Apache CXF

    By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack, which allows a malicious actor to inject javascript into the web p…

    Apache CXF org.apache.cxf:cxf org.apache.cxf:apache-cxf Maven