org.apache.cxf/cxf: CXF JMS Code Execution Vulnerability

🗓️ 02 Oct 2025 14:58:17Reported by RedHatType

Security flaw in org.apache.cxf enables untrusted users to configure Java Message Service to use remote or directory URLs and execute code.

Reporter	Title	Published	Views	Family All 76
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-48795 CVE-2025-48913)	1 Dec 202511:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by a Apache/Tomcat Vulnerabilities related to cxf-core-3.5.10.jar vulnerability (CVE-2025-48913)	9 Dec 202514:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.	27 Feb 202609:44	–	ibm
ATTACKERKB	CVE-2026-44417	22 May 202612:17	–	attackerkb
Tenable Nessus	Apache CXF < 3.6.8 / 4.x < 4.0.9 / 4.1.x < 4.1.3 RCE (CVE-2025-48913)	14 Aug 202500:00	–	nessus
Tenable Nessus	Apache CXF < 3.6.11 / 4.0.x < 4.1.6 / 4.2.x < 4.2.1 Multiple Vulnerabilities	28 May 202600:00	–	nessus
Tenable Nessus	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.6)	21 Jul 202600:00	–	nessus
Tenable Nessus	RHEL 8 / 9 : Red Hat JBoss Enterprise Application Platform 8.1.0 (RHSA-2025:17298)	2 Oct 202500:00	–	nessus
Tenable Nessus	RHEL 8 / 9 : Red Hat JBoss Enterprise Application Platform 8.0.9 (RHSA-2025:17317)	2 Oct 202500:00	–	nessus
Tenable Nessus	RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.24 (RHSA-2026:4915)	18 Mar 202600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	8	noarch	eap8-apache-commons-lang	3.18.0-1.redhat_00002.1.el8eap	eap8-apache-commons-lang-3.18.0-1.redhat_00002.1.el8eap.noarch.rpm
Red Hat Enterprise Linux	9	noarch	eap8-apache-commons-lang	3.18.0-1.redhat_00002.1.el9eap	eap8-apache-commons-lang-3.18.0-1.redhat_00002.1.el9eap.noarch.rpm
Red Hat Enterprise Linux	8	noarch	eap8-apache-cxf	4.0.9-4.redhat_00002.1.el8eap	eap8-apache-cxf-4.0.9-4.redhat_00002.1.el8eap.noarch.rpm
Red Hat Enterprise Linux	9	noarch	eap8-apache-cxf	4.0.9-4.redhat_00002.1.el9eap	eap8-apache-cxf-4.0.9-4.redhat_00002.1.el9eap.noarch.rpm
Red Hat Enterprise Linux	8	noarch	eap8-apache-cxf-rt	4.0.9-4.redhat_00002.1.el8eap	eap8-apache-cxf-rt-4.0.9-4.redhat_00002.1.el8eap.noarch.rpm
Red Hat Enterprise Linux	9	noarch	eap8-apache-cxf-rt	4.0.9-4.redhat_00002.1.el9eap	eap8-apache-cxf-rt-4.0.9-4.redhat_00002.1.el9eap.noarch.rpm
Red Hat Enterprise Linux	8	noarch	eap8-apache-cxf-services	4.0.9-4.redhat_00002.1.el8eap	eap8-apache-cxf-services-4.0.9-4.redhat_00002.1.el8eap.noarch.rpm
Red Hat Enterprise Linux	9	noarch	eap8-apache-cxf-services	4.0.9-4.redhat_00002.1.el9eap	eap8-apache-cxf-services-4.0.9-4.redhat_00002.1.el9eap.noarch.rpm
Red Hat Enterprise Linux	8	noarch	eap8-apache-cxf-tools	4.0.9-4.redhat_00002.1.el8eap	eap8-apache-cxf-tools-4.0.9-4.redhat_00002.1.el8eap.noarch.rpm
Red Hat Enterprise Linux	9	noarch	eap8-apache-cxf-tools	4.0.9-4.redhat_00002.1.el9eap	eap8-apache-cxf-tools-4.0.9-4.redhat_00002.1.el9eap.noarch.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2025-48913
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.apache.org/thread/f1nv488ztc0js4g5ml2v88mzkzslyh83
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-48913
cve	www.cve.org/CVERecord

14 Sep 2026 20:40Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.19.8

EPSS0.00793

SSVC