CVE-2021-30468 Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter

🗓️ 16 Jun 2021 12:00:18Reported by apacheType

CVE-2021-30468 Apache CXF JSON Parsing DoS Vulnerabilit

Reporter	Title	Published	Views	Family All 33
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	29 Apr 202502:26	–	ibm
IBM Security Bulletins	Security Bulletin: Apache CXF as used by IBM QRadar SIEM is vulnerable to denial of service (DOS) (CVE-2021-30468)	3 Dec 202118:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator B2B API vulnerable to multiple issues due to Apache CXF	11 Apr 202413:17	–	ibm
IBM Security Bulletins	Security Bulletin: Tivoli Network Manager IP Edition is vulnerable to a denial of service vulnerability (CVE-2021-30468)	25 Jan 202208:15	–	ibm
IBM Security Bulletins	Security Bulletin: Apache CXF vulnerability identified in IBM Tivoli Application Dependency Discovery Manager (CVE-2021-30468)	24 Aug 202109:04	–	ibm
IBM Security Bulletins	Security Bulletin:IBM TRIRIGA Application Platform discloses CVE-2021-30468	30 Aug 202216:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance uses components with known vulnerabilities (CVE-2021-22696, CVE-2021-30468, CVE-2020-1954)	21 Jun 202320:31	–	ibm
CNNVD	Apache CXF 资源管理错误漏洞	16 Jun 202100:00	–	cnnvd
CNVD	Apache CXF Resource Management Error Vulnerability (CNVD-2021-70100)	13 Jul 202100:00	–	cnvd
CVE	CVE-2021-30468	16 Jun 202112:00	–	cve

[
  {
    "product": "Apache CXF",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "changes": [
          {
            "at": "3.3.11",
            "status": "unaffected"
          }
        ],
        "lessThan": "3.4.4",
        "status": "affected",
        "version": "Apache CXF",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread.html/r4a4b6bc0520b69c18d2a59daa6af84ae49f0c22164dccb8538794459%40%3Cannounce.apache.org%3E
security	www.security.netapp.com/advisory/ntap-20210917-0002/
openwall	www.openwall.com/lists/oss-security/2021/06/16/2
cxf	www.cxf.apache.org/security-advisories.data/CVE-2021-30468.txt.asc
lists	www.lists.apache.org/thread.html/rac07822057521dccf33ab5d136e0e8c599a6e2c8ac75e44ffbdc6e07%40%3Ccommits.tomee.apache.org%3E
lists	www.lists.apache.org/thread.html/r3f46ae38e4a6e80c069cdb320e0ce831b0a21a12ef0cc92c0943f34a%40%3Ccommits.tomee.apache.org%3E
lists	www.lists.apache.org/thread.html/r54c0f1cbbb9f381dfbedb9ea5e90ecb1c0a15371f40c4b10322ac737%40%3Ccommits.tomee.apache.org%3E
lists	www.lists.apache.org/thread.html/r4a4b6bc0520b69c18d2a59daa6af84ae49f0c22164dccb8538794459%40%3Cusers.cxf.apache.org%3E
lists	www.lists.apache.org/thread.html/ra833f78b3fa577cb43558cf343859a1bf70b1c5ce2353b3877d96422%40%3Ccommits.tomee.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuapr2022.html

19 Apr 2022 23:54Current

7.7High risk

Vulners AI Score7.7

EPSS0.07024

CWE-400