org.apache.cxf:cxf-bundle vulnerabilities

Published: 17 years ago Last updated: 10 years ago Latest version: 2.7.18 Latest non-vulnerable version: 2.7.18

License

Known vulnerabilities in the org.apache.cxf:cxf-bundle package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Cross-site Scripting (XSS)	[3.0.0-milestone2,)
M Denial of Service (DoS)	[2.1.10,2.2)[2.2.6,2.6.14)[2.7.0,2.7.11)
C Authorization Bypass	[2.4.5,2.4.6)[2.5.1,2.5.2)
M Information Exposure	[2.0.6,2.6.13)[2.7.0,2.7.10)
C Improper Verification of Cryptographic Signature	[2.4.0,2.4.8)[2.5.0,2.5.4)[2.6.0,2.6.1)
M Cryptographic Issues	[2.5.0,2.5.7)[2.6.0,2.6.4)[2.7.0,2.7.1)
M Authentication Bypass	[2.4.1,2.5.9)[2.6.0,2.6.6)[2.7.0,2.7.3)
M Denial of Service (DoS)	[2.6.0,2.6.14)[2.7.0,2.7.11)[3.0.0-milestone1,3.0.0-milestone2)
H Insufficient constraints on Document Type Declarations (DTDs)	[2.2.0,2.2.9)[2.1.0,2.1.10)[2.0.0,2.0.13)
M Authentication Bypass	[2.6.0,2.6.2)[2.5.0,2.5.5)[,2.4.9)
M Improper Authentication	[,2.5.8)[2.6.0,2.6.5)[2.7.0,2.7.2)

106 VERSIONS IN TOTAL See all versions