Apache Software Foundation / Apache CXF

159 vulnerabilities across affected versions.

CVE-2022-46364CRITICAL9.80 – 3.4.10

CVE-2022-46364CRITICAL9.80 – 3.5.5

CVE-2025-48913CRITICAL9.80 – 3.6.8

CVE-2025-48913CRITICAL9.84.0.0 – 4.0.9

CVE-2025-48913CRITICAL9.84.1.0 – 4.1.3

CVE-2026-66909CRITICAL9.80 – 3.6.12

CVE-2026-66909CRITICAL9.84.0.0 – 4.1.8

CVE-2026-66909CRITICAL9.84.2.0 – 4.2.3

CVE-2026-68079CRITICAL9.84.0.0 – 4.1.8

CVE-2026-68079CRITICAL9.84.2.0 – 4.2.3

CVE-2026-68079CRITICAL9.80 – 3.6.12

CVE-2024-28752CRITICAL9.30 – 4.0.4, 3.6.3, 3.5.8

CVE-2026-107938CRITICAL9.14.0.0 – 4.1.9

CVE-2026-107938CRITICAL9.10 – 3.6.13

CVE-2026-107938CRITICAL9.14.2.0 – 4.2.4

CVE-2026-61466CRITICAL9.10 – 3.6.12

CVE-2026-61466CRITICAL9.14.2.0 – 4.2.3

CVE-2026-61466CRITICAL9.14.0.0 – 4.1.8

CVE-2026-63687CRITICAL9.10 – 3.6.12

CVE-2026-63687CRITICAL9.14.2.0 – 4.2.3

CVE-2026-63687CRITICAL9.14.0.0 – 4.1.8

CVE-2026-65583CRITICAL9.10 – 3.6.12

CVE-2026-65583CRITICAL9.14.0.0 – 4.1.8

CVE-2026-65583CRITICAL9.14.2.0 – 4.2.3

CVE-2026-71575CRITICAL9.14.0.0 – 4.1.9

CVE-2026-71575CRITICAL9.10 – 3.6.13

CVE-2026-71575CRITICAL9.14.2.0 – 4.2.4

CVE-2026-97468CRITICAL9.10 – 3.6.13

CVE-2026-97468CRITICAL9.14.2.0 – 4.2.4

CVE-2026-97468CRITICAL9.14.0.0 – 4.1.9

CVE-2026-50632HIGH8.80 – 3.6.12

CVE-2026-50632HIGH8.84.0.0 – 4.1.7

CVE-2026-50632HIGH8.84.2.0 – 4.2.2

CVE-2026-50632HIGH8.80 – 4.1.7

CVE-2026-50627HIGH8.10 – 3.6.12

CVE-2026-50627HIGH8.14.0.0 – 4.1.7

CVE-2026-50627HIGH8.14.2.0 – 4.2.2

CVE-2026-50627HIGH8.10 – 4.1.7

CVE-2026-50633HIGH8.14.2.0 – 4.2.2

CVE-2026-50633HIGH8.14.0.0 – 4.1.7

CVE-2026-50633HIGH8.10 – 4.1.7

CVE-2026-50633HIGH8.10 – 3.6.12

CVE-2026-57817HIGH8.14.2.0 – 4.2.3

CVE-2026-57817HIGH8.14.0.0 – 4.1.8

CVE-2026-57817HIGH8.10 – 3.6.12

CVE-2026-57818HIGH8.14.0.0 – 4.1.8

CVE-2026-57818HIGH8.14.2.0 – 4.2.3

CVE-2026-57818HIGH8.10 – 3.6.12

CVE-2026-73179HIGH8.14.2.0 – 4.2.4

CVE-2026-73179HIGH8.14.0.0 – 4.1.9