Поиск уязвимостей
Количество 4
Количество 4
CVE-2014-0034
The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.
CVE-2014-0034
The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.
GHSA-38x2-fp9m-87mx
Improper Input Validation in Apache CXF
ALT-PU-2016-3300
ALT-PU-2016-3300: package `cxf` update to version 2.7.11-alt1_3jpp8
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2014-0034 The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token. | CVSS2: 4.3 | 7% Низкий | больше 12 лет назад |
 | CVE-2014-0034 The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token. | CVSS2: 4.3 | 7% Низкий | больше 12 лет назад |
| GHSA-38x2-fp9m-87mx Improper Input Validation in Apache CXF | 7% Низкий | больше 4 лет назад | |
| ALT-PU-2016-3300 ALT-PU-2016-3300: package `cxf` update to version 2.7.11-alt1_3jpp8 | CVSS2: 5.8 | почти 11 лет назад |
Уязвимостей на страницу