Apache CXF vulnerabilities

2 published CVEs name Apache CXF among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 0
Critical: 0
Known exploited: 0

Critical 0High 1Medium 1Low 0Not scored 0

Newest CVEs

CVE-2019-17573
By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected…
Apache · CXF
Medium6.1
CVE-2019-12423
Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the…
Apache · CXF
High7.5

Most common weaknesses