Apache Apache CXF vulnerabilities

2 published CVEs name Apache Apache CXF among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 0
Critical: 1
Known exploited: 0

Critical 1High 0Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

20191
20201

Newest CVEs

CVE-2020-1954
Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘…
Apache · Apache CXF
Medium5.3
CVE-2019-12419
Apache CXF before 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service. There is a vulnerability…
Apache · Apache CXF
Critical9.8

Most common weaknesses

CWE-863 Incorrect authorization1