Apache CXF 3.6.x < 3.6.4, 4.0.x < 4.0.5 DoS

Language:

Version 1.3 Jan 27, 2025, 7:07 AM CVSS metrics ("CVSSv3 score" set to 5.9) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Exploit attributes ("Exploit available" set to "False") Exploit attributes ("Exploitability ease" set to "No known exploits are available") Plugin Feed: 202501270707
Version 1.2 Jan 24, 2025, 6:48 PM New Plugin Feed: 202501241848
Version 1.1 Jan 24, 2025, 11:23 AM New Plugin Feed: 202501241123

* Changelogs are generally available for changes made after Nov 1, 2022