CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-2379

Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token specifies a child WS-SecurityPolicy 1.1 or 1.2 policy, does not properly ensure that an XML element is signed or encrypted, which has unspecified impact and attack vectors.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.038

EPSS Ranking 87.5%

CVSS Severity

CVSS v2 Score 10.0

References

Products affected by CVE-2012-2379

Apache » Cxf » Version: 2.4.0

cpe:2.3:a:apache:cxf:2.4.0
Apache » Cxf » Version: 2.4.1

cpe:2.3:a:apache:cxf:2.4.1
Apache » Cxf » Version: 2.4.2

cpe:2.3:a:apache:cxf:2.4.2
Apache » Cxf » Version: 2.4.3

cpe:2.3:a:apache:cxf:2.4.3
Apache » Cxf » Version: 2.4.4

cpe:2.3:a:apache:cxf:2.4.4
Apache » Cxf » Version: 2.4.5

cpe:2.3:a:apache:cxf:2.4.5
Apache » Cxf » Version: 2.4.6

cpe:2.3:a:apache:cxf:2.4.6
Apache » Cxf » Version: 2.4.7

cpe:2.3:a:apache:cxf:2.4.7
Apache » Cxf » Version: 2.5.0

cpe:2.3:a:apache:cxf:2.5.0
Apache » Cxf » Version: 2.5.1

cpe:2.3:a:apache:cxf:2.5.1
Apache » Cxf » Version: 2.5.2

cpe:2.3:a:apache:cxf:2.5.2
Apache » Cxf » Version: 2.5.3

cpe:2.3:a:apache:cxf:2.5.3
Apache » Cxf » Version: 2.6.0

cpe:2.3:a:apache:cxf:2.6.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-2379

Products

Pricing

Contact Us