CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Github Security Blog•added 2022/05/13 1:9 a.m.•27 views

Improper Authentication in Apache CXF

The WS-SP UsernameToken policy in Apache CXF 2.4.5 and 2.5.1 allows remote attackers to bypass authentication by sending an empty UsernameToken as part of a SOAP request...

9.8CVSS6.5AI score0.0354EPSS

SaveExploits0References16Affected Software1

OSV•added 2022/05/13 1:9 a.m.•46 views

GHSA-2P7X-JCR3-7P2C Improper Authentication in Apache CXF

The WS-SP UsernameToken policy in Apache CXF 2.4.5 and 2.5.1 allows remote attackers to bypass authentication by sending an empty UsernameToken as part of a SOAP request...

9.8CVSS9.6AI score0.0354EPSS

SaveExploits0References16

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by