GCVE - cpe:2.3:a:apache:cxf:2.4.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:cxf:2.4.4:*:*:*:*:*:*:*

part: a version: 2.4.4 update: *

Vendor	Apache (`b0303047-b7dd-5cf8-abcc-71b7d9d80b95`)
Product	Cxf (`50f1d7f0-1ad2-57a6-bb7b-0f9ea8944dab`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:apache/cxf`	purl2cpe	2026-06-01 10:14:23.700569
`pkg:github/apache/cxf`	purl2cpe	2026-06-01 10:14:23.700571
`pkg:maven/org.apache.cxf/cxf`	purl2cpe	2026-06-01 10:14:23.700572
`pkg:rpm/fedora/cxf`	purl2cpe	2026-06-01 10:14:23.700573

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-0110`	vulnerable	2026-06-08 05:05:11.540174	Details available Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message. Published: 2014-05-08T14:00:00.000Z Updated: 2024-08-06T09:05:38.936Z Open on db.gcve.eu Reference links http://cxf.apache.org/security-advisories.data/CVE-2014-0110.txt.asc?version=1&modificationDate=1398873378628&api=v2 http://rhn.redhat.com/errata/RHSA-2015-0850.html http://rhn.redhat.com/errata/RHSA-2015-0851.html http://www.securitytracker.com/id/1030202 http://rhn.redhat.com/errata/RHSA-2014-1351.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0109`	vulnerable	2026-06-08 05:05:11.530599	Details available Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error. Published: 2014-05-08T14:00:00.000Z Updated: 2024-08-06T09:05:38.268Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2015-0850.html http://rhn.redhat.com/errata/RHSA-2015-0851.html https://cxf.apache.org/security-advisories.data/CVE-2014-0109.txt.asc?version=1&modificationDate=1398873370740&api=v2 http://www.securitytracker.com/id/1030201 http://rhn.redhat.com/errata/RHSA-2014-1351.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0239`	vulnerable	2026-06-08 05:03:46.373198	Details available Apache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext UsernameToken WS-SecurityPolicy is enabled, allows remote attackers to bypass authentication via a security header of a SOAP request containing a UsernameToken element that lacks a password child element. Published: 2013-03-12T22:00:00.000Z Updated: 2024-08-06T14:18:09.633Z Open on db.gcve.eu Reference links http://osvdb.org/90078 http://secunia.com/advisories/51988 http://seclists.org/fulldisclosure/2013/Feb/39 https://exchange.xforce.ibmcloud.com/vulnerabilities/81981 http://cxf.apache.org/cve-2013-0239.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2379`	vulnerable	2026-06-08 05:02:04.034103	Details available Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token specifies a child WS-SecurityPolicy 1.1 or 1.2 policy, does not properly ensure that an XML element is signed or encrypted, which has unspecified impact and attack vectors. Published: 2013-01-03T01:00:00.000Z Updated: 2024-08-06T19:34:23.874Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2012-1559.html http://cxf.apache.org/cve-2012-2379.html http://rhn.redhat.com/errata/RHSA-2013-0192.html http://rhn.redhat.com/errata/RHSA-2013-0198.html http://rhn.redhat.com/errata/RHSA-2012-1594.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.