Most recent entries from all

certfr-2025-avi-0867 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan…

2026-10-04T14:05:01.993698+00:00

certfr-2025-avi-0867

EUVD-2026-272475

2026-10-04T14:05:01.993761+00:00

EUVD-2026-272475

fkie_cve-2025-48913

2026-10-04T14:05:01.993777+00:00

If untrusted users are allowed to configure JMS for Apache CXF, previously they could use RMI or LDAP URLs, potentially leading to code execution capabilities. This interface is now restricted to reject those protocols, removing this possibility.

Users are recommended to upgrade to versions 3.6.8, 4.0.9 or 4.1.3, which fix this issue.

GHSA-g4px-6qhm-hqjm — Apache CXF: Untrusted JMS configuration can lead to RCE

2026-10-04T14:05:01.993810+00:00

Affected: Maven: org.apache.cxf:cxf-rt-transports-jms

Users are recommended to upgrade to versions 3.6.8, 4.0.9 or 4.1.3, which fix this issue.

RHSA-2025:17298 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.0 security update

2026-10-04T14:05:01.993838+00:00

org.apache.cxf/cxf: CXF JMS Code Execution Vulnerability netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

WID-SEC-W-2025-1751 — Apache CXF: Schwachstelle ermöglicht Codeausführung

2026-10-04T14:05:01.993861+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache CXF ausnutzen, um beliebigen Programmcode auszuführen.