Security
فارسی
All products

org.apache.cxf:cxf-core

Maven · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache CXF has Improper Restriction of XML External Entity ReferenceCVE-2026-49875 · GHSA-XW5H-CMH3-8J6J org.apache.cxf:cxf-coreRed Hat Fuse 7/cxf-core MavenRed Hat Critical Fix reported
Apache CXF is vulnerable to DoS attacks as entire files are read into memory and loggedCVE-2025-48795 · GHSA-36WV-V2QP-V4G4 org.apache.cxf:cxf-coreRed Hat JBoss Enterprise Application Platform 7/cxf MavenRed Hat Medium Fix reported
Apache cxf-core: No restriction on attachment headers per messageCVE-2026-50645 · GHSA-GHVC-7HP8-2G2V org.apache.cxf:cxf-coreRed Hat Fuse 7/cxf-core MavenRed Hat High Fix reported
Apache CXF: Denial of Service vulnerability with temporary filesCVE-2025-23184 · GHSA-FH5R-CRHR-QRRQ org.apache.cxf:cxf-coreLogging Subsystem for Red Hat OpenShift/org.apache.cxf/cxf-core MavenRed Hat High Fix reported
Improper Neutralization of Input During Web Page Generation in Apache CXFCVE-2016-6812 · GHSA-VW2C-5WPH-V92R org.apache.cxf:cxf-coreRed Hat BPM Suite 6/cxf MavenRed Hat Medium Fix reported
Session Fixation in Apache CXFCVE-2017-5656 · GHSA-V936-X3J5-C76J org.apache.cxf:cxf-coreRed Hat JBoss Enterprise Application Platform 7/cxf MavenRed Hat High Fix reported
Improper Restriction of XML External Entity Reference in Apache CXF JAX-RSCVE-2016-8739 · GHSA-X7XF-253V-X3W8 org.apache.cxf:cxf-coreRed Hat JBoss BRMS 5/cxf MavenRed Hat High Fix reported
Improper Certificate Validation in Apache CXFCVE-2017-5653 · GHSA-HGG6-8X62-M9GF org.apache.cxf:cxf-core Maven Medium Fix reported
Improper Input Validation in Apache CXFCVE-2017-12624 · GHSA-7VGJ-8MW4-HG8R org.apache.cxf:cxf-coreRed Hat Fuse 7/cxf MavenRed Hat Medium Fix reported
Apache CXF vulnerable to Exposure of Sensitive InformationCVE-2022-46363 · GHSA-3W37-5P3P-JV92 org.apache.cxf:cxf-coreMigration Toolkit for Runtimes/org.apache.cxf-cxf-api MavenRed Hat High Fix reported
Uncontrolled Resource Consumption in Apache CXFCVE-2014-0110 · GHSA-5XF9-3V63-WW6F org.apache.cxf:cxf-coreOpenShift Enterprise 1/cxf MavenRed Hat Medium Fix reported
Uncontrolled Resource Consumption in Apache CXFCVE-2014-0109 · GHSA-5WQF-H3R3-GXVH org.apache.cxf:cxf-coreOpenShift Enterprise 1/cxf MavenRed Hat Medium Fix reported
Cleartext Transmission of Sensitive Information in Apache CXFCVE-2014-0035 · GHSA-V45R-RJ5X-HPG2 org.apache.cxf:cxf-coreOpenShift Enterprise 1/cxf MavenRed Hat Medium Fix reported
Apache CXF Server-Side Request Forgery vulnerabilityCVE-2022-46364 · GHSA-X3X3-QWJQ-8GJ4 org.apache.cxf:cxf-coreRed Hat Data Grid 8/cxf MavenRed Hat Critical Fix reported