CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Github Security Blog•added 2022/05/13 1:09 a.m.•36 views

Improper Authentication in Apache CXF

The WS-SP UsernameToken policy in Apache CXF 2.4.5 and 2.5.1 allows remote attackers to bypass authentication by sending an empty UsernameToken as part of a SOAP request...

9.8CVSS6.5AI score0.0354EPSS

SaveExploits0References16Affected Software1

OSV•added 2022/05/13 1:09 a.m.•56 views

GHSA-2P7X-JCR3-7P2C Improper Authentication in Apache CXF

The WS-SP UsernameToken policy in Apache CXF 2.4.5 and 2.5.1 allows remote attackers to bypass authentication by sending an empty UsernameToken as part of a SOAP request...

9.8CVSS9.6AI score0.0354EPSS

SaveExploits0References16

Mend•added 2017/08/08 9:00 p.m.•2 views

CVE-2012-0803

The WS-SP UsernameToken policy in Apache CXF 2.4.5 and 2.5.1 allows remote attackers to bypass authentication by sending an empty UsernameToken as part of a SOAP request...

9.8CVSS0.0354EPSS

SaveExploits0References18

Rapid7 Vulnerability Database (full)•added 2017/08/08 12:00 a.m.•4 views

CVE-2012-0803: Improper Authentication

The WS-SP UsernameToken policy in Apache CXF 2.4.5 and 2.5.1 allows remote attackers to bypass authentication by sending an empty UsernameToken as part of a SOAP request...

9.8CVSS5.8AI score0.0354EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by