| CVE-2016-8739 |
high |
7.5 |
7.5 |
9y ago |
Improper Restriction of XML External Entity Reference in Apache CXF JAX-RS |
|
| CVE-2017-5656 |
high |
7.5 |
7.5 |
9y ago |
Session Fixation in Apache CXF |
|
| CVE-2016-6812 |
medium |
6.1 |
6.1 |
9y ago |
Improper Neutralization of Input During Web Page Generation in Apache CXF |
|
| CVE-2017-12624 |
medium |
5.5 |
5.5 |
9y ago |
Improper Input Validation in Apache CXF |
|
| CVE-2017-5653 |
medium |
5.3 |
5.3 |
9y ago |
Improper Certificate Validation in Apache CXF |
|
| CVE-2014-0035 |
medium |
— |
4.3 |
12y ago |
Cleartext Transmission of Sensitive Information in Apache CXF |
|
| CVE-2014-0110 |
medium |
— |
4.3 |
12y ago |
Uncontrolled Resource Consumption in Apache CXF |
|
| CVE-2014-0109 |
medium |
— |
4.3 |
12y ago |
Uncontrolled Resource Consumption in Apache CXF |
|
| CVE-2025-48795 |
unknown |
— |
— |
11mo ago |
Apache CXF is vulnerable to DoS attacks as entire files are read into memory and logged |
|
| CVE-2025-23184 |
unknown |
— |
— |
1y ago |
Apache CXF: Denial of Service vulnerability with temporary files |
|
| CVE-2022-46364 |
unknown |
— |
— |
4y ago |
Apache CXF Server-Side Request Forgery vulnerability |
|
| CVE-2022-46363 |
unknown |
— |
— |
4y ago |
Apache CXF vulnerable to Exposure of Sensitive Information |
|