Lucene search
K

EUVD-2022-7768

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 2 Views

SSRF vulnerability in Apache CXF allows attackers to exploit webservices via MTOM requests.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: Vulnerability found in cxf-core-3.5.4.jar which is shipped with IBM® Intelligent Operations Center(CVE-2022-46364)
5 Sep 202313:26
ibm
IBM Security Bulletins
Security Bulletin: server-side request forgery vulnerability in Apache CXF (CVE-2022-46364) may affect CICS TX Advanced
10 Mar 202316:00
ibm
IBM Security Bulletins
Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities
7 Mar 202303:26
ibm
IBM Security Bulletins
Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is vulnerable to server-side request forgery due to Apache CXF (CVE-2022-46364)
20 Feb 202315:02
ibm
IBM Security Bulletins
Security Bulletin: WebSphere Application Server Liberty is vulnerable to server-side request forgery due to Apache CXF
16 Feb 202303:56
ibm
IBM Security Bulletins
Security Bulletin: A security vulnerability has been identified in WebSphere Liberty shipped with IBM Security Guardium Key Lifecycle Manager (SKLM/GKLM) (CVE-2022-46364)
25 Oct 202407:07
ibm
IBM Security Bulletins
Security Bulletin: Multiple Security Vulnerabilities were identified in IBM Security Verify Access (CVE-2023-46158, CVE-2023-0482, CVE-2022-46364, CVE-2023-28867)
17 Jan 202415:13
ibm
IBM Security Bulletins
Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities (CVE-2022-41946, CVE-2022-46364, CVE-2023-24998)
18 Jul 202306:05
ibm
IBM Security Bulletins
Security Bulletin: InfoSphere Identity Insight vulnerable to server-side request forgery due to Apache CXF (CVE-2022-46364)
16 Mar 202319:06
ibm
IBM Security Bulletins
Security Bulletin: server-side request forgery vulnerability in Apache CXF (CVE-2022-46364) may affect CICS TX Standard
10 Mar 202316:02
ibm
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "131810c3-4a1d-305b-a755-cbb70266e801",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0cd993a1-1e88-3ef2-80ac-d639fc62760d",
        "product": {
          "name": "Apache CXF"
        },
        "product_version": "0 <3.4.10"
      },
      {
        "id": "32a7b08b-8f18-3684-94ab-fcef60d77c65",
        "product": {
          "name": "Apache CXF"
        },
        "product_version": "0 <3.5.5"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Oct 2025 20:07Current
6.2Medium risk
Vulners AI Score6.2
CVSS 3.19.8
EPSS0.00103
SSVC
2