| CVE-2017-12624 |
Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications
|
Not rated
|
Nov 14, 2017 |
| CVE-2017-3156 |
The OAuth2 Hawk and JOSE MAC Validation code in Apache CXF prior to 3.0.13 and 3.1.x prior to 3.1.10 is not using a…
|
Not rated
|
Aug 10, 2017 |
| CVE-2016-8739 |
The JAX-RS module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 provides a number of Atom JAX-RS…
|
Not rated
|
Aug 10, 2017 |
| CVE-2016-6812 |
The HTTP transport module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 uses FormattedServiceListWriter to…
|
Not rated
|
Aug 10, 2017 |
| CVE-2017-5656 |
Apache CXF's STSClient before 3.1.11 and 3.0.13 uses a flawed way of caching tokens that are associated with…
|
Not rated
|
Apr 18, 2017 |
| CVE-2017-5653 |
JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response…
|
Not rated
|
Apr 18, 2017 |