Advisories · Technology
Apache Software Foundation Apache CXF.
Every CVE that names Apache Software Foundation Apache CXF among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Apache CXF: Prevent unbounded XML document size in StaxUtils by adding default element and character limits
- Apache Software Foundation Apache CXF
- Denial of service
- CVSS 9.1 CriticalCritical · CVSS 9+
Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification.
- Apache Software Foundation Apache CXF
- Weak cryptography or TLS
- CVSS 7.5 High
Apache CXF: The attachment header size and count limits can be bypassed, which allows denial of service through memory exhaustion.
- Apache Software Foundation Apache CXF
- Denial of service
- CVSS 7.5 High
Apache CXF: XML Signature wrapping in JAX-RS XML Security
- Apache Software Foundation Apache CXF
- Race condition
- CVSS 7.5 High
Apache CXF: STSTokenValidator can accept untrusted SAML assertions because it shares validation state between requests
- Apache Software Foundation Apache CXF
- Race condition
- CVSS 9.1 CriticalCritical · CVSS 9+
Apache CXF: Authentication bypass via weak cache keys for validated STS tokens
- Apache Software Foundation Apache CXF
- Weak cryptography or TLS
- CVSS 7.5 High
Apache CXF: FIQL Query Parser Denial of Service
- Apache Software Foundation Apache CXF
- Denial of service
- CVSS 6.1 Medium
Apache CXF: OIDC RP Open Redirect
- Apache Software Foundation Apache CXF
- Open redirect
- CVSS 7.5 High
Apache CXF: Unbounded DEFLATE Decompression in CXF JOSE/JWE and SAML Processing (Decompression Bomb)
- Apache Software Foundation Apache CXF
- CWE-409
- CVSS 8.1 High
Apache CXF: JPA authorization-code consume is non-atomic
- Apache Software Foundation Apache CXF
- Race condition
- CVSS 9.1 CriticalCritical · CVSS 9+
Apache CXF: Inoperative max_age authentication-freshness check in OidcClientCodeRequestFilter
- Apache Software Foundation Apache CXF
- Authentication bypass
- CVSS 8.1 High
Apache CXF: OAuth2 Authorization Code Replay via TOCTOU in JCacheCodeDataProvider
- Apache Software Foundation Apache CXF
- Race condition
- CVSS 9.1 CriticalCritical · CVSS 9+
Apache CXF: OAuth2 Dynamic Client Registration Scope Self-Escalation
- Apache Software Foundation Apache CXF
- Authentication bypass
- CVSS 9.1 CriticalCritical · CVSS 9+
Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters
- Apache Software Foundation Apache CXF
- CWE-345
- CVSS 9.1 CriticalCritical · CVSS 9+
Apache CXF: Self-issued ID token claims validation skipped
- Apache Software Foundation Apache CXF
- CWE-345
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replay
- Apache Software Foundation Apache CXF
- Authentication bypass
- CVSS 7.5 High
Apache CXF: Revocation bypass in DefaultEncryptingOAuthDataProvider
- Apache Software Foundation Apache CXF
- CWE-672
- CVSS 7.5 High
Apache CXF: XXE via WSDL/XSD import parsing
- Apache Software Foundation Apache CXF
- XML external entities (XXE)
- CVSS 8.1 High
Apache CXF: The authorization code hash (c_hash) is not enforced for the hybrid OIDC flow
- Apache Software Foundation Apache CXF
- CWE-20
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache CXF: Unsafe deserialization of inbound JMS ObjectMessage
- Apache Software Foundation Apache CXF
- Insecure deserialization
- CVSS 7.5 High
Apache CXF: Denial of service via message header attachments
- Apache Software Foundation Apache CXF
- Denial of service
- CVSS 7.5 High
Apache CXF: No default restriction on the amount of form parameters per message
- Apache Software Foundation Apache CXF
- Denial of service
- CVSS 7.5 High
Apache CXF: Denial of Service attack via large attachments
- Apache Software Foundation Apache CXF
- Denial of service