org.apache.cxf:cxf-core vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-48795Mediumorg.apache.cxf:cxf-core: Apache CXF is vulnerable to DoS attacks as entire files are read into memory and logged CVE-2025-23184Highorg.apache.cxf:cxf-core: Apache CXF: Denial of Service vulnerability with temporary files CVE-2022-46364Criticalorg.apache.cxf:cxf-core: Apache CXF Server-Side Request Forgery vulnerability CVE-2022-46363Highorg.apache.cxf:cxf-core: Apache CXF vulnerable to Exposure of Sensitive Information CVE-2017-12624Mediumorg.apache.cxf:cxf-core: Improper Input Validation in Apache CXF CVE-2016-8739Highorg.apache.cxf:cxf-core: Improper Restriction of XML External Entity Reference in Apache CXF JAX-RS CVE-2014-0110Mediumorg.apache.cxf:cxf-core: Uncontrolled Resource Consumption in Apache CXF CVE-2016-6812Mediumorg.apache.cxf:cxf-core: Improper Neutralization of Input During Web Page Generation in Apache CXF CVE-2014-0109Mediumorg.apache.cxf:cxf-core: Uncontrolled Resource Consumption in Apache CXF CVE-2014-0035Mediumorg.apache.cxf:cxf-core: Cleartext Transmission of Sensitive Information in Apache CXF CVE-2017-5656Highorg.apache.cxf:cxf-core: Session Fixation in Apache CXF CVE-2017-5653Mediumorg.apache.cxf:cxf-core: Improper Certificate Validation in Apache CXF

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo