CVE-2022-46363 Apache CXF directory listing / code exfiltration

🗓️ 13 Dec 2022 14:55:46Reported by apacheType

Apache CXF vulnerability allows remote directory listing or code exfiltratio

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 50
Vulnrichment	CVE-2022-46363 Apache CXF directory listing / code exfiltration	13 Dec 202214:46	–	vulnrichment
OSV	Apache CXF vulnerable to Exposure of Sensitive Information	13 Dec 202215:30	–	osv
OSV	CVE-2022-46363	13 Dec 202215:15	–	osv
OSV	RHSA-2025:1747 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.12 security update	24 Feb 202510:02	–	osv
OSV	RHSA-2025:1746 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.9 on RHEL 7 security update	24 Feb 202510:02	–	osv
OSV	RHSA-2023:1043 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 7	30 Sep 202416:32	–	osv
OSV	RHSA-2023:1044 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 8	30 Sep 202416:32	–	osv
OSV	RHSA-2023:1045 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 9	30 Sep 202416:31	–	osv
IBM Security Bulletins	Security Bulletin: IBM Sterling Global Mailbox is vulnerable to sensitive data exposure due to Apache CXF (CVE-2022-46363)	21 Jul 202312:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Business Service Manager is vulnerable to remote code execution due to Apache CXF (CVE-2022-46363)	30 Apr 202321:16	–	ibm

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache CXF",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "3.5.5",
        "status": "affected",
        "version": "3.5",
        "versionType": "maven"
      },
      {
        "lessThan": "3.4.10",
        "status": "affected",
        "version": "3.4",
        "versionType": "maven"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread/pdzo1qgyplf4y523tnnzrcm7hoco3l8c

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Dec 2022 14:46Current

7.7High risk

Vulners AI Score7.7

EPSS0.00065

CWE-20