Apache CXF

Every one of the 59 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Apache CXF Reflected XSS in the services listing page via the styleSheetPathCVE-2020-13954Apache Software Foundation · 41% likely

   CWE-79

2. Apache CXF before 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service. There is a vulnerability in the access token s…CVE-2019-12419Apache · 14% likely

   CWE-863

3. JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to sp…CVE-2017-5653Apache Software Foundation · 11% likely

   CWE-295

4. It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via 'System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");'.…CVE-2018-8039Apache Software Foundation · 8.2% likely

   CWE-755

5. The HTTP transport module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 uses FormattedServiceListWriter to provide an HTML page which lists the names and absolute URL add…CVE-2016-6812Apache Software Foundation · 7.5% likely

   CWE-79

6. The JAX-RS module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 provides a number of Atom JAX-RS MessageBodyReaders. These readers use Apache Abdera Parser which expands…CVE-2016-8739Apache Software Foundation · 7.3% likely

   CWE-611

7. Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriterCVE-2021-30468Apache Software Foundation · 7.0% likely

   CWE-400

8. Apache CXF's STSClient before 3.1.11 and 3.0.13 uses a flawed way of caching tokens that are associated with delegation tokens, which means that an attacker could craft a token wh…CVE-2017-5656Apache Software Foundation · 6.8% likely

   CWE-384

9. OAuth 2 authorization service vulnerable to DDos attacksCVE-2021-22696Apache Software Foundation · 6.6% likely

   CWE-918

10. The OAuth2 Hawk and JOSE MAC Validation code in Apache CXF prior to 3.0.13 and 3.1.x prior to 3.1.10 is not using a constant time MAC signature comparison algorithm which may be e…CVE-2017-3156Apache Software Foundation · 6.3% likely
11. Apache CXF before 3.3.4 and 3.2.11 does not restrict the number of message attachments present in a given message. This leaves open the possibility of a denial of service type att…CVE-2019-12406Apache · 6.3% likely

    CWE-770

12. Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘ property of the defau…CVE-2020-1954Apache · 6.1% likely
13. Apache CXF: OAuth2: Missing JWT Audience and Issuer Validation in Access Token ValidatorCVE-2026-50627Apache Software Foundation · CVSS 9.1 · 4.1% likely

    CWE-289

14. Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to craft a message attachment header that could lead to a Deni…CVE-2017-12624Apache Software Foundation · 3.7% likely
15. Apache CXF SSRF Vulnerability using the Aegis databindingCVE-2024-28752Apache Software Foundation · CVSS 9.3 · 3.1% likely

    CWE-918

16. Apache CXF SSRF VulnerabilityCVE-2022-46364Apache Software Foundation · CVSS 9.8 · 2.5% likely

    CWE-918

17. Apache CXF: Denial of Service vulnerability with temporary filesCVE-2025-23184Apache Software Foundation · CVSS 5.9 · 2.2% likely

    CWE-400

18. Apache CXF Denial of Service vulnerability in JOSECVE-2024-32007Apache Software Foundation · CVSS 7.5 · 1.3% likely

    CWE-400

19. Apache CXF directory listing / code exfiltrationCVE-2022-46363Apache Software Foundation · CVSS 7.5 · 1.3% likely

    CWE-20

20. Apache CXF: Unrestricted memory consumption in CXF HTTP clientsCVE-2024-41172Apache Software Foundation · CVSS 5.3 · 1.2% likely

    CWE-401

21. Apache CXF: Untrusted JMS configuration can lead to RCECVE-2025-48913Apache Software Foundation · CVSS 9.8 · 1.1% likely

    CWE-20

22. Apache CXF: SSRF vulnerability via WADL stylesheet parameterCVE-2024-29736Apache Software Foundation · CVSS 7.5 · 1.1% likely

    CWE-918

23. Apache CXF: JNDI Injection vulnerability in DispatchMDBMessageListenerImplCVE-2026-50633Apache Software Foundation · CVSS 8.1 · 0.9% likelycovered by CyberSIXT

    CWE-20

24. Apache CXF: OAuth2: Inverted IP Binding Check Defeats Security ControlCVE-2026-50628Apache Software Foundation · CVSS 9.8 · 0.7% likely

    CWE-20

25. Apache CXF: Denial of Service and sensitive data exposure in logsCVE-2025-48795Apache Software Foundation · CVSS 5.6 · 0.7% likely

    CWE-400

26. Apache CXF: No default restriction on the amount of form parameters per messageCVE-2026-57819Apache Software Foundation · CVSS 7.5 · 0.7% likely

    CWE-400

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.