Apache CXF vulnerabilities
2 published CVEs name Apache CXF among the affected products.
- 2Published CVEs2 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2019-17573
By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected…
Apache · CXF
Medium6.1 - CVE-2019-12423
Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the…
Apache · CXF
High7.5