Approved changes feed: RSS · Atom

cpe:2.3:a:apache:cxf:2.7.10:*:*:*:*:*:*:*

part: a version: 2.7.10 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductCxf (50f1d7f0-1ad2-57a6-bb7b-0f9ea8944dab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/cxf purl2cpe 2026-06-01 10:14:23.700782
pkg:github/apache/cxf purl2cpe 2026-06-01 10:14:23.700783
pkg:maven/org.apache.cxf/cxf purl2cpe 2026-06-01 10:14:23.700784
pkg:rpm/fedora/cxf purl2cpe 2026-06-01 10:14:23.700786

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0110 vulnerable 2026-06-08 05:05:11.540899 Details available
Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message.
Published: 2014-05-08T14:00:00.000Z
Updated: 2024-08-06T09:05:38.936Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0109 vulnerable 2026-06-08 05:05:11.527566 Details available
Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error.
Published: 2014-05-08T14:00:00.000Z
Updated: 2024-08-06T09:05:38.268Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.