Apache Software Foundation CXF 2.5.3
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:cxf:2.5.3:*:*:*:*:*:*:*
part: a version: 2.5.3 update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Cxf (50f1d7f0-1ad2-57a6-bb7b-0f9ea8944dab) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/cxf |
purl2cpe | 2026-06-01 10:14:23.700631 |
pkg:github/apache/cxf |
purl2cpe | 2026-06-01 10:14:23.700633 |
pkg:maven/org.apache.cxf/cxf |
purl2cpe | 2026-06-01 10:14:23.700634 |
pkg:rpm/fedora/cxf |
purl2cpe | 2026-06-01 10:14:23.700635 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-0110 |
vulnerable | 2026-06-08 05:05:11.540287 |
Details available
Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message.
Published: 2014-05-08T14:00:00.000Z
Updated: 2024-08-06T09:05:38.936Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0109 |
vulnerable | 2026-06-08 05:05:11.534111 |
Details available
Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error.
Published: 2014-05-08T14:00:00.000Z
Updated: 2024-08-06T09:05:38.268Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2160 |
vulnerable | 2026-06-08 05:03:58.668806 |
Details available
The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via crafted XML with a large number of (1) elements, (2) attributes, (3) nested constructs, and possibly other vectors.
Published: 2013-08-19T23:00:00.000Z
Updated: 2024-08-06T15:27:40.907Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0239 |
vulnerable | 2026-06-08 05:03:46.377097 |
Details available
Apache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext UsernameToken WS-SecurityPolicy is enabled, allows remote attackers to bypass authentication via a security header of a SOAP request containing a UsernameToken element that lacks a password child element.
Published: 2013-03-12T22:00:00.000Z
Updated: 2024-08-06T14:18:09.633Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5633 |
vulnerable | 2026-06-08 05:02:57.623940 |
Details available
The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request.
Published: 2013-03-12T22:00:00.000Z
Updated: 2024-08-06T21:14:16.218Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5575 |
vulnerable | 2026-06-08 05:02:57.371663 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2379 |
vulnerable | 2026-06-08 05:02:04.035434 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2378 |
vulnerable | 2026-06-08 05:02:04.029623 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.