CVE-2022-46364

CVE-2022-46364 — Apache CXF MTOM/XOP SSRF File Read Proof-of-Concept exploit for CVE-2022-46364 — an Apache CXF server-side request forgery SSRF vulnerability in MTOM/XOP request processing. Vulnerability Summary CVE-2022-46364 affects Apache CXF versions before 3.4.10 and 3.5.5. When MTOM Messag...

CVE-2022-46364-Poc

CVE-2022-46364 Exploit Apache CXF SSRF via MTOM XOP:Include | CVSS 9.8 CRITICAL Vulnerability Apache CXF -s -d -t, --target - Vulnerable CXF SOAP endpoint required -s, --ssrf-url - Internal URL to exfiltrate required -d, --domain - Target domain default: localhost --plain-soap - Use plain SOAP...

CVE-2024-28752

Apache CXF CVE-2024-28752 复现环境 漏洞公告：https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt 环境启动 samples/javafirstjaxwsfactorybean IDEA 通过 ServerStarter.java 启动 webservice 服务 构建 使用 JDK8 root@kitploit: mvn clean package java -jar target/cxf.jar 漏洞利用 使用 BurpSuite 发送如下请求即可触发。 root@kitploi...

CVE-2022-46364-htb-ctf

DevArea SOAP 利用工具 CVE-2022-46364 描述 此专用漏洞利用工具针对 Hack The Box 上的 DevArea 环境。它利用 Apache CXF 3.2.14 中的一个关键漏洞 CVE-2022-46364 来执行 本地文件包含 LFI 和 服务器端请求伪造 SSRF 。 该脚本滥用了 MTOM/XOP （消息传输优化机制）处理引擎。通过注入一个 元素，我们强制服务器的 AttachmentDeserializer 获取本地系统文件或内部网络资源，并将它们反射回 SOAP 响应中。 特性 自动化的多部分构造： 处理触发 XOP 处理所需的复杂...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by an XML External Entity Injection vulnerability due to Apache CXF (CVE-2026-65432)

Summary There is a vulnerability in the Apache CXF library that affects IBM WebSphere Application Server Liberty with jaxws-2.2, xmlWS-3.0, xmlWS-4.0, wsSecurity-1.1 or wsAtomicTransactions-1.2 enabled. Vulnerability Details CVEID:CVE-2026-65432 DESCRIPTION: Apache CXF reads a top-level WSDL...

asf__cxf_CVE-2016-6812_3-0-11

欢迎使用 Apache CXF！ Apache CXF 是一个开源服务框架。CXF 帮助您使用前端编程 API（如 JAX-WS 和 JAX-RS）构建和开发服务。这些服务可以使用多种协议，如 SOAP、XML/HTTP、RESTful HTTP 或 CORBA，并可通过多种传输方式运行，如 HTTP、JMS 或 JBI。 CXF 包含广泛的功能集，但主要专注于以下领域： Web 服务标准支持：CXF 支持多种 Web 服务标准，包括 SOAP、Basic...

CVE-2022-46364---Apache-CXF-XOP-Include-LFI-PoC

Apache CXF XOP Include LFI CVE-2022-46364 Overview This repository contains a Proof-of-Concept PoC exploit for CVE-2022-46364 , a Local File Inclusion LFI vulnerability in Apache CXF. The vulnerability arises due to improper handling of XOP XML-binary Optimized Packaging Include elements in SOAP...

CVE-2022-46364-Proof-of-the-concept

CVE-2022-46364: Apache CXF MTOM XOP:Include SSRF to LFI Exploit ⚠️ DISCLAIMER THIS TOOL IS FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING ONLY This proof-of-concept exploit is provided for educational purposes to help security professionals understand the vulnerability and protect their systems...

Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.

Summary Multiple vulnerabilities were identified in third-party components used by CICS Transaction Gateway for Multiplatforms, including IBM WebSphere Application Server, IBM WebSphere Application Server Liberty, Apache Tomcat Embed, Logback, Log4j, Jackson Databind, and various operating system...

CVE-2022-46364-poc

CVE-2022-46364 — Apache CXF XOP:Include SSRF / LFI Author: 0xmid00 Vulnerability: SSRF / Local File Read via XOP:Include in MTOM requests Affected: Apache CXF 3.5.5 and 3.4.10 What is the Vulnerability? Apache CXF processes MTOM Message Transmission Optimization Mechanism messages that contain...

asf__cxf_CVE-2019-17573_3-2-11

欢迎使用 Apache CXF！ Apache CXF 是一个开源服务框架。CXF 帮助您使用 JAX-WS 和 JAX-RS 等前端编程 API 构建和开发服务。这些服务可以支持多种协议，如 SOAP、XML/HTTP、RESTful HTTP 或 CORBA，并可在 HTTP、JMS 或 JBI 等多种传输方式上运行。 CXF 包含广泛的功能集，但主要侧重于以下几个方面： Web 服务标准支持：CXF 支持多种 Web 服务标准，包括 SOAP、Basic...

CVE-2026-61466

A flaw was found in Apache CXF. The OAuth2 Dynamic Client Registration endpoint in Apache CXF does not properly validate the scope value provided during client registration. This oversight allows a malicious client to assign itself privileged access scopes, potentially leading to unauthorized...

CVE-2026-63687

A flaw was found in Apache CXF. This vulnerability allows an attacker, who has compromised a client's secret, to bypass critical security protections in the authorization process. By injecting malicious values for parameters like codechallenge and nonce, the attacker can undermine the integrity o...

CRLF Injection

Apache CXF is vulnerable to CRLF Injection. The vulnerability is due to unsanitized clientId values from HTTP requests being directly included in OAuth2 server log messages, which allows an attacker to inject arbitrary content or forged log entries into server log files...

Improper Validation Of Specified Type Of Input

Apache CXF is vulnerable to Improper Validation of Specified Type of Input. The vulnerability is due to incomplete validation of untrusted JMS configuration, which allows an attacker who can configure JMS for Apache CXF to inject malicious configuration and potentially execute arbitrary code...

XML External Entity (XXE) Injection

Apache CXF is vulnerable to an XML External Entity XXE injection. The vulnerability is due to insufficient JAXP hardening of SAXParserFactory configurations, which allows an attacker to exploit external entity resolution to perform out-of-band OOB requests and potentially access sensitive resourc...

Authentication Bypass

org.apache.cxf, cxf-rt-rs-security-oauth2 is vulnerable to an Authentication Bypass. The vulnerability is due to a missing throw statement in the security context check, which allows an unauthenticated network attacker to access the /services/oauth2/introspect endpoint and perform token...

Improper Access Control

org.apache.cxf, cxf-rt-rs-security-oauth2 is vulnerable to an improper access control. The vulnerability is due to an inverted IP address validation check that rejects legitimate requests from the bound IP address while allowing requests from other IP addresses, which allows an attacker to bypass...

Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Buinsess Automation Workflow (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)

Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow. Information about security vulnerabilities affecting IBM WebSphere Application Server Traditional have been published in a security bulletin. Vulnerability Details Refer to the security bulletins...

CVE-2026-66909

A flaw was found in Apache CXF. The Java Message Service JMS transport component improperly deserializes inbound JMS ObjectMessages without type restrictions. A remote attacker can exploit this by sending a specially crafted message to the service's JMS destination. This vulnerability could lead ...