CVE-2017-5653

🗓️ 18 Apr 2017 16:00:00Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 103 Views

JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13

Reporter	Title	Published	Views	Family All 18
IBM Security Bulletins	Security Bulletin: Mulitiple security vulnerabilities in Apache CXF affects IBM InfoSphere Master Data Management (CVE-2016-6812 CVE-2016-8739 CVE-2017-5653 CVE-2017-5656 CVE-2017-3156)	16 Jun 201814:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerabilities	27 May 202008:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerability	19 Jul 201916:20	–	ibm
CNVD	Apache CXF Server Spoofing Vulnerability	21 Apr 201700:00	–	cnvd
Cvelist	CVE-2017-5653	18 Apr 201716:00	–	cvelist
EUVD	EUVD-2022-4142	3 Oct 202520:07	–	euvd
F5 Networks	K58530825: Apache CXF vulnerability CVE-2017-5653	21 Feb 202318:33	–	f5
Github Security Blog	Improper Certificate Validation in Apache CXF	13 May 202201:09	–	github
NVD	CVE-2017-5653	18 Apr 201716:59	–	nvd
OSV	CVE-2017-5653	18 Apr 201716:59	–	osv

NVD

Vulners

Node

apache cxfRange3.0.0–3.0.13

apache cxfRange3.1.0–3.1.11

[
  {
    "product": "Apache CXF",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 3.0.13"
      },
      {
        "status": "affected",
        "version": "3.1.x prior to 3.1.11"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/97968
cxf	www.cxf.apache.org/security-advisories.data/CVE-2017-5653.txt.asc
lists	www.lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E
access	www.access.redhat.com/errata/RHSA-2017:1832
lists	www.lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E
lists	www.lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E
lists	www.lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
securitytracker	www.securitytracker.com/id/1038279
lists	www.lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E
lists	www.lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E

13 May 2026 00:24Current

5.4Medium risk

Vulners AI Score5.4

CVSS 25

CVSS 35.3

EPSS0.03167

CWE-295