Apache Software Foundation / Apache CXF

126 vulnerabilities across affected versions.

CVE-2022-46364CRITICAL9.80 – 3.4.10

CVE-2022-46364CRITICAL9.80 – 3.5.5

CVE-2025-48913CRITICAL9.84.1.0 – 4.1.3

CVE-2025-48913CRITICAL9.84.0.0 – 4.0.9

CVE-2025-48913CRITICAL9.80 – 3.6.8

CVE-2026-66909CRITICAL9.84.0.0 – 4.1.8

CVE-2026-66909CRITICAL9.84.2.0 – 4.2.3

CVE-2026-66909CRITICAL9.80 – 3.6.12

CVE-2026-68079CRITICAL9.84.2.0 – 4.2.3

CVE-2026-68079CRITICAL9.84.0.0 – 4.1.8

CVE-2026-68079CRITICAL9.80 – 3.6.12

CVE-2024-28752CRITICAL9.30 – 4.0.4, 3.6.3, 3.5.8

CVE-2026-61466CRITICAL9.10 – 3.6.12

CVE-2026-61466CRITICAL9.14.2.0 – 4.2.3

CVE-2026-61466CRITICAL9.14.0.0 – 4.1.8

CVE-2026-63687CRITICAL9.10 – 3.6.12

CVE-2026-63687CRITICAL9.14.0.0 – 4.1.8

CVE-2026-63687CRITICAL9.14.2.0 – 4.2.3

CVE-2026-65583CRITICAL9.14.0.0 – 4.1.8

CVE-2026-65583CRITICAL9.10 – 3.6.12

CVE-2026-65583CRITICAL9.14.2.0 – 4.2.3

CVE-2026-50632HIGH8.80 – 3.6.12

CVE-2026-50632HIGH8.84.0.0 – 4.1.7

CVE-2026-50632HIGH8.84.2.0 – 4.2.2

CVE-2026-50632HIGH8.80 – 4.1.7

CVE-2026-50627HIGH8.14.0.0 – 4.1.7

CVE-2026-50627HIGH8.10 – 3.6.12

CVE-2026-50627HIGH8.14.2.0 – 4.2.2

CVE-2026-50627HIGH8.10 – 4.1.7

CVE-2026-50633HIGH8.14.2.0 – 4.2.2

CVE-2026-50633HIGH8.14.0.0 – 4.1.7

CVE-2026-50633HIGH8.10 – 4.1.7

CVE-2026-50633HIGH8.10 – 3.6.12

CVE-2026-57817HIGH8.14.2.0 – 4.2.3

CVE-2026-57817HIGH8.14.0.0 – 4.1.8

CVE-2026-57817HIGH8.10 – 3.6.12

CVE-2026-57818HIGH8.14.0.0 – 4.1.8

CVE-2026-57818HIGH8.14.2.0 – 4.2.3

CVE-2026-57818HIGH8.10 – 3.6.12

CVE-2022-46363HIGH7.53.4 – 3.4.10

CVE-2022-46363HIGH7.53.5 – 3.5.5

CVE-2024-29736HIGH7.50 – 3.5.9, 3.6.4, 4.0.5

CVE-2024-32007HIGH7.50 – 4.0.5, 3.6.4, 3.5.9

CVE-2026-44417HIGH7.50 – 3.6.11

CVE-2026-44417HIGH7.54.0.0 – 4.1.6

CVE-2026-44417HIGH7.54.2.0 – 4.2.1

CVE-2026-44930HIGH7.50 – 3.6.11

CVE-2026-44930HIGH7.54.0.0 – 4.1.6

CVE-2026-44930HIGH7.54.2.0 – 4.2.1

CVE-2026-49875HIGH7.54.0.0 – 4.1.7