Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Fuse 7/cxf-rt-rs-security-oauth2
Red Hat
· Package
6 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Apache CXF OAuth2 TOCTOU Race Condition in Refresh Token Processing
CVE-2026-50631 · GHSA-83R6-96M8-R52P
org.apache.cxf:cxf-rt-rs-security-oauth2
Red Hat Fuse 7/cxf-rt-rs-security-oauth2
Maven
Red Hat
High
Fix reported
2026-08-20
Apache CXF OAuth2 has Inverted IP Binding Check that Defeats Security Control
CVE-2026-50628 · GHSA-G5V7-JCHF-7JRR
org.apache.cxf:cxf-rt-rs-security-oauth2
Red Hat Fuse 7/cxf-rt-rs-security-oauth2-saml
Maven
Red Hat
Critical
Fix reported
2026-08-20
Apache CXF OAuth2 Missing JWT Audience and Issuer Validation in Access Token Validator
CVE-2026-50627 · GHSA-9MRV-8PVF-HF4M
org.apache.cxf:cxf-rt-rs-security-oauth2
Red Hat Fuse 7/cxf-rt-rs-security-oauth2-saml
Maven
Red Hat
Critical
Fix reported
2026-08-20
org.apache.cxf/cxf-rt-rs-security-oauth2: Apache CXF: Generation of multiple access tokens via authorization code race condition
CVE-2026-73179
Red Hat Fuse 7/cxf-rt-rs-security-oauth2
Red Hat JBoss Web Server 5/cxf-rt-rs-security-oauth2
Red Hat
Low
No fix reported
Not recorded
cxf-rt-rs-security-oauth2: Apache CXF: Security bypass due to improper handling of authorization parameters
CVE-2026-63687
Red Hat Fuse 7/cxf-rt-rs-security-oauth2
Red Hat JBoss Enterprise Application Platform 7/cxf
Red Hat
High
No fix reported
Not recorded
cxf: Apache CXF: Privilege Escalation via OAuth2 Dynamic Client Registration Scope Self-Assignment
CVE-2026-61466
Red Hat Fuse 7/cxf-rt-rs-security-oauth2
Red Hat JBoss Web Server 5/cxf-rt-rs-security-oauth2
Red Hat
Medium
No fix reported
Not recorded
