All products

Red Hat BPM Suite 6/cxf-core

Red Hat · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache CXF JMX Integration is vulnerable to a MITM attackCVE-2020-1954 · GHSA-FFM7-7R8G-77XM org.apache.cxf:cxf-rt-managementRed Hat BPM Suite 6/cxf-core MavenRed Hat Medium Fix reported
Cross-site scripting in Apache CXFCVE-2020-13954 · GHSA-64X2-GQ24-75PV org.apache.cxf:apache-cxforg.apache.cxf:cxf MavenRed Hat Medium Fix reported
Reflected Cross-Site Scripting in Apache CXFCVE-2019-17573 · GHSA-F93P-F762-VR53 org.apache.cxf:apache-cxforg.apache.cxf:cxf MavenRed Hat Medium Fix reported
Private key leak in Apache CXFCVE-2019-12423 · GHSA-42F2-F9VC-6365 org.apache.cxf:apache-cxforg.apache.cxf:cxf MavenRed Hat High Fix reported
Potential session hijack in Apache CXF CVE-2019-12419 · GHSA-CW6W-Q88J-6MQF org.apache.cxf:cxfRed Hat BPM Suite 6/cxf-core MavenRed Hat Critical Fix reported
Potential DOS attack due to unrestricted attachment count in messagesCVE-2019-12406 · GHSA-58P8-9G59-Q2HR org.apache.cxf:apache-cxforg.apache.cxf:cxf MavenRed Hat Medium Fix reported