Advisories · Technology
Apache Software Foundation Apache Neethi.
Every CVE that names Apache Software Foundation Apache Neethi among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Apache Neethi: Remote policy fetch lacks a total timeout, allowing a slow server to hang the request indefinitely
- Apache Software Foundation Apache Neethi
- Denial of service
- CVSS 7.5 High
Apache Neethi: Crafted policies cause unbounded work during intersection leading to denial of service
- Apache Software Foundation Apache Neethi
- Denial of service
- CVSS 7.5 High
Apache Neethi: Crafted policy references cause exponential expansion during normalization leading to denial of service
- Apache Software Foundation Apache Neethi
- Denial of service
- CVSS 7.5 High
Apache Neethi: Crafted WS-Policy documents bypass element/attribute limits causing memory exhaustion
- Apache Software Foundation Apache Neethi
- Denial of service
- CVSS 7.5 High
Apache Neethi: Uncontrolled recursion while parsing crafted WS-Policy documents allows denial of service
- Apache Software Foundation Apache Neethi
- Denial of service
- CVSS 7.5 High
Apache Neethi: Remote PolicyReference fetch lacks resource bounds
- Apache Software Foundation Apache Neethi
- Denial of service
- CVSS 7.5 High
Apache Neethi: Missing global alternative-output budget across policy computation paths
- Apache Software Foundation Apache Neethi
- Denial of service
- CVSS 7.5 High
Apache Neethi: Uncontrolled recursion in policy processing
- Apache Software Foundation Apache Neethi
- Denial of service