Apache Cxf (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2020-04-01. Vendor: Apache.

CVEs of Apache Cxf

• CVE-2020-1954 - CVSS 5.3 (medium), 2020-04-01: Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘…
• CVE-2019-12419 - CVSS 9.8 (critical), 2019-11-06: Apache CXF before 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service. There is a vulnerability…