| CVE-2024-41172 |
In versions of Apache CXF before 3.6.4 and 4.0.5 (3.5.x and lower versions are not impacted), a CXF HTTP client…
|
Not rated
|
Jul 19, 2024 |
| CVE-2024-32007 |
An improper input validation of the p2c parameter in the Apache CXF JOSE code before 4.0.5, 3.6.4 and 3.5.9 allows an…
|
Not rated
|
Jul 19, 2024 |
| CVE-2024-29736 |
A SSRF vulnerability in WADL service description in versions of Apache CXF before 4.0.5, 3.6.4 and 3.5.9 allows an…
|
Not rated
|
Jul 19, 2024 |
| CVE-2024-28752 |
A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an…
|
Not rated
|
Mar 15, 2024 |
| CVE-2019-17573 |
By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses
|
Not rated
|
Jan 16, 2020 |
| CVE-2019-12423 |
Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK…
|
Not rated
|
Jan 16, 2020 |