Cxf
Apache · 69 CVEs
Apache CXF: OAuth2 Authorization Code Replay via TOCTOU in JCacheCodeDataProvider
Aug 6, 2026
Apache CXF: OAuth2 Dynamic Client Registration Scope Self-Escalation
Aug 6, 2026
Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters
Aug 6, 2026
Apache CXF: Self-issued ID token claims validation skipped
Aug 6, 2026
Apache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replay
Aug 6, 2026
Apache CXF: Revocation bypass in DefaultEncryptingOAuthDataProvider
Aug 6, 2026
Apache CXF: XXE via WSDL/XSD import parsing
Aug 6, 2026
Apache CXF: The authorization code hash (c_hash) is not enforced for the hybrid OIDC flow
Aug 6, 2026
Apache CXF: Unsafe deserialization of inbound JMS ObjectMessage
Aug 6, 2026
Apache CXF: Denial of service via message header attachments
Aug 6, 2026
Apache CXF: No default restriction on the amount of form parameters per message
Aug 6, 2026
Apache CXF: Denial of Service attack via large attachments
Aug 6, 2026
Apache CXF: No restriction on attachment headers per message
Jun 12, 2026
Apache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entry
Jun 12, 2026
Apache CXF: JNDI Injection vulnerability in DispatchMDBMessageListenerImpl
Jun 12, 2026
Apache CXF: JNDI Injection Vulnerability in JMSConfigFactory
Jun 12, 2026
Apache CXF: OAuth2: TOCTOU Race Condition in Refresh Token Processing
Jun 12, 2026
Apache CXF: OAuth2: HTTP Response Splitting via WWW-Authenticate Realm Injection
Jun 12, 2026
Apache CXF: OAuth2: Log Injection via Unsanitized Client Identifier
Jun 12, 2026
Apache CXF: OAuth2: Inverted IP Binding Check Defeats Security Control
Jun 12, 2026
Apache CXF: OAuth2: Missing JWT Audience and Issuer Validation in Access Token Validator
Jun 12, 2026
Apache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtils
Jun 12, 2026
Apache CXF: Authentication Bypass in OAuth2 TokenIntrospectionService
Jun 12, 2026
Apache CXF: Incomplete fix for CVE-2025-48913 (Untrusted JMS configuration can lead to RCE)
May 22, 2026
Apache CXF: XXE vulnerability in WS-Transfer functionality
May 22, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-57818 | Apache CXF: OAuth2 Authorization Code Replay via TOCTOU in JCacheCodeDataProvider | HIGH | 0.47% | Aug 6, 2026 |
| CVE-2026-61466 | Apache CXF: OAuth2 Dynamic Client Registration Scope Self-Escalation | CRITICAL | 0.71% | Aug 6, 2026 |
| CVE-2026-63687 | Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters | CRITICAL | 0.28% | Aug 6, 2026 |
| CVE-2026-65583 | Apache CXF: Self-issued ID token claims validation skipped | CRITICAL | 0.28% | Aug 6, 2026 |
| CVE-2026-68079 | Apache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replay | CRITICAL | 0.68% | Aug 6, 2026 |
| CVE-2026-68481 | Apache CXF: Revocation bypass in DefaultEncryptingOAuthDataProvider | HIGH | 0.66% | Aug 6, 2026 |
| CVE-2026-65432 | Apache CXF: XXE via WSDL/XSD import parsing | HIGH | 0.65% | Aug 6, 2026 |
| CVE-2026-57817 | Apache CXF: The authorization code hash (c_hash) is not enforced for the hybrid OIDC flow | HIGH | 0.69% | Aug 6, 2026 |
| CVE-2026-66909 | Apache CXF: Unsafe deserialization of inbound JMS ObjectMessage | CRITICAL | 1.15% | Aug 6, 2026 |
| CVE-2026-64958 | Apache CXF: Denial of service via message header attachments | HIGH | 0.66% | Aug 6, 2026 |
| CVE-2026-57819 | Apache CXF: No default restriction on the amount of form parameters per message | HIGH | 0.73% | Aug 6, 2026 |
| CVE-2026-54225 | Apache CXF: Denial of Service attack via large attachments | HIGH | 0.73% | Aug 6, 2026 |
| CVE-2026-50645 | Apache CXF: No restriction on attachment headers per message | HIGH | 0.74% | Jun 12, 2026 |
| CVE-2026-50634 | Apache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entry | MEDIUM | 0.36% | Jun 12, 2026 |
| CVE-2026-50633 | Apache CXF: JNDI Injection vulnerability in DispatchMDBMessageListenerImpl | CRITICAL | 1.27% | Jun 12, 2026 |
| CVE-2026-50632 | Apache CXF: JNDI Injection Vulnerability in JMSConfigFactory | CRITICAL | 1.12% | Jun 12, 2026 |
| CVE-2026-50631 | Apache CXF: OAuth2: TOCTOU Race Condition in Refresh Token Processing | HIGH | 0.39% | Jun 12, 2026 |
| CVE-2026-50630 | Apache CXF: OAuth2: HTTP Response Splitting via WWW-Authenticate Realm Injection | MEDIUM | 0.64% | Jun 12, 2026 |
| CVE-2026-50629 | Apache CXF: OAuth2: Log Injection via Unsanitized Client Identifier | HIGH | 0.70% | Jun 12, 2026 |
| CVE-2026-50628 | Apache CXF: OAuth2: Inverted IP Binding Check Defeats Security Control | CRITICAL | 1.02% | Jun 12, 2026 |
| CVE-2026-50627 | Apache CXF: OAuth2: Missing JWT Audience and Issuer Validation in Access Token Validator | CRITICAL | 0.78% | Jun 12, 2026 |
| CVE-2026-49875 | Apache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtils | CRITICAL | 0.81% | Jun 12, 2026 |
| CVE-2026-50623 | Apache CXF: Authentication Bypass in OAuth2 TokenIntrospectionService | MEDIUM | 0.54% | Jun 12, 2026 |
| CVE-2026-44417 | Apache CXF: Incomplete fix for CVE-2025-48913 (Untrusted JMS configuration can lead to RCE) | HIGH | 0.90% | May 22, 2026 |
| CVE-2026-44618 | Apache CXF: XXE vulnerability in WS-Transfer functionality | MEDIUM | 0.54% | May 22, 2026 |
Showing 1 to 25 of 69 CVEs