Apache CXF < 3.5.10 , 3.6.x < 3.6.5, 4.0.x < 4.0.6 DoS

Language:

Version 1.6 Jun 8, 2025, 5:30 AM Logic Changes (match vendor advisory) Plugin Feed: 202506080530
Version 1.5 Apr 4, 2025, 7:32 AM Logic Changes (corrected a false positive) Plugin Feed: 202504040732
Version 1.3 Jan 27, 2025, 7:07 AM CVSS metrics ("CVSSv3 score" set to 5.9) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Exploit attributes ("Exploit available" set to "False") Exploit attributes ("Exploitability ease" set to "No known exploits are available") Plugin Feed: 202501270707
Version 1.2 Jan 24, 2025, 6:48 PM New Plugin Feed: 202501241848
Version 1.1 Jan 24, 2025, 11:23 AM New Plugin Feed: 202501241123

* Changelogs are generally available for changes made after Nov 1, 2022