GCVE - cpe:2.3:a:apple:cfnetwork:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apple:cfnetwork:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Apple (`c2b419d0-9f0f-51c1-88dc-2e204a98e1c7`)
Product	Cfnetwork (`c4a8b50d-d609-5a74-8456-02d54a30446c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/aosm/cfnetwork`	purl2cpe	2026-06-01 10:12:26.302569
`pkg:github/nanoant/cfnetwork`	purl2cpe	2026-06-01 10:12:26.302573

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-0214`	vulnerable	2026-06-08 04:56:35.911507	Details available CFNetwork in Apple Safari before 5.0.6 on Windows does not properly handle an untrusted attribute of a system root certificate, which allows remote web servers to bypass intended SSL restrictions via a certificate signed by a blacklisted certification authority. Published: 2011-07-21T23:00:00.000Z Updated: 2024-09-16T23:22:16.872Z Open on db.gcve.eu Reference links http://support.apple.com/kb/HT4808 http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1800`	vulnerable	2026-06-08 04:54:10.609574	Details available CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to redirect a connection and obtain sensitive information via crafted responses. Published: 2010-08-25T19:00:00.000Z Updated: 2024-09-17T04:05:14.297Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1024359 http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html http://support.apple.com/kb/HT4312	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1420`	vulnerable	2026-06-08 04:54:07.599489	Details available Cross-site scripting (XSS) vulnerability in CFNetwork in Apple Safari before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted text/plain file. Published: 2011-07-21T23:00:00.000Z Updated: 2024-09-17T02:42:17.858Z Open on db.gcve.eu Reference links http://support.apple.com/kb/HT4808 http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1383`	vulnerable	2026-06-08 04:54:07.407494	Details available CFNetwork in Apple Safari before 5.0.6 on Windows allows remote web servers to execute arbitrary code by replaying the NTLM credentials of a client user, related to a "credential reflection" issue. Published: 2011-07-21T23:00:00.000Z Updated: 2024-09-16T17:58:17.124Z Open on db.gcve.eu Reference links http://support.apple.com/kb/HT4808 http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-2403`	vulnerable	2026-06-08 04:49:44.823491	Details available CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attackers to trigger the transmission of arbitrary FTP commands to arbitrary FTP servers. Published: 2007-08-03T10:00:00.000Z Updated: 2024-08-07T13:33:28.721Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2007/2732 http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html http://securitytracker.com/id?1018491 https://exchange.xforce.ibmcloud.com/vulnerabilities/35721 http://docs.info.apple.com/article.html?artnum=306172	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.