搜索结果
关于「cxf」的漏洞数据
| AVD编号 | 漏洞名称 | 漏洞类型 | 披露时间 | 漏洞状态 |
|---|---|---|---|---|
| AVD-2026-97791 | Apache CXF SAML 竞态认证绕过漏洞(CVE-2026-97791) | 2026-10-09 | ||
| AVD-2026-97468 | CXF STS令牌缓存认证绕过(CVE-2026-97468) | 2026-10-09 | ||
| AVD-2026-86463 | Apache CXF FIQL 解析器拒绝服务漏洞(CVE-2026-86463) | 2026-10-09 | ||
| AVD-2026-79650 | Apache CXF OIDC 依赖方开放重定向(CVE-2026-79650) | 2026-10-09 | ||
| AVD-2026-78384 | Apache CXF 解压炸弹拒绝服务漏洞(CVE-2026-78384) | 2026-10-09 | ||
| AVD-2026-73179 | Apache CXF JPA授权码竞态漏洞(CVE-2026-73179) | 2026-10-09 | ||
| AVD-2026-71575 | Apache CXF OIDC认证时效校验失效漏洞(CVE-2026-71575) | 2026-10-09 | ||
| AVD-2026-108039 | Apache CXF XML解析拒绝服务漏洞(CVE-2026-108039) | 2026-10-09 | ||
| AVD-2026-107938 | Apache CXF Netty 客户端 TLS 主机名校验缺失(CVE-2026-107938) | 2026-10-09 | ||
| AVD-2026-107937 | Apache CXF附件头限制绕过漏洞(CVE-2026-107937) | 2026-10-09 | ||
| AVD-2026-100227 | Apache CXF XML签名包装漏洞(CVE-2026-100227) | 2026-10-09 | ||
| AVD-2026-68481 | Apache CXF：DefaultEncryptingOAuthDataProvider 中的撤销绕过 (CVE-2026-68481) | 2026-08-06 | ||
| AVD-2026-68079 | Apache CXF：DefaultEncryptingCodeDataProvider 允许无限制重放授权代码 (CVE-2026-68079) | 2026-08-06 | ||
| AVD-2026-61466 | Apache CXF：OAuth2 动态客户端注册范围自我升级 (CVE-2026-61466) | 2026-08-06 | ||
| AVD-2026-57818 | Apache CXF：通过 JCacheCodeDataProvider 中的 TOCTOU 重放 OAuth2 授权代码 (CVE-2026-57818) | 2026-08-06 | ||
| AVD-2026-63687 | Apache CXF：JwtRequestCodeFilter 静默覆盖外部 PKCE 和随机数参数 (CVE-2026-63687) | 2026-08-06 | ||
| AVD-2026-65583 | Apache CXF：跳过自行颁发的 ID 令牌声明验证 (CVE-2026-65583) | 2026-08-06 | ||
| AVD-2026-57819 | Apache CXF：对每条消息的表单参数数量没有默认限制 (CVE-2026-57819) | 2026-08-06 | ||
| AVD-2026-57817 | Apache CXF：混合 OIDC 流不强制执行授权代码哈希 (c_hash) (CVE-2026-57817) | 2026-08-06 | ||
| AVD-2026-54225 | Apache CXF：通过大型附件进行拒绝服务攻击 (CVE-2026-54225) | 2026-08-06 | ||
| AVD-2026-64958 | Apache CXF：通过消息标头附件拒绝服务 (CVE-2026-64958) | 2026-08-06 | ||
| AVD-2026-65432 | Apache CXF：通过 WSDL/XSD 导入解析进行 XXE (CVE-2026-65432) | 2026-08-06 | ||
| AVD-2026-66909 | Apache CXF：入站 JMS ObjectMessage 的不安全反序列化 (CVE-2026-66909) | 2026-08-06 | ||
| AVD-2026-50645 | Apache CXF附件头数量无限制DoS漏洞(CVE-2026-50645) | 2026-06-12 | ||
| AVD-2026-50632 | Apache CXF JMS JNDI注入漏洞(CVE-2026-50632) | 2026-06-12 | ||
| AVD-2026-50634 | Apache CXF JwsJsonContainerRequestFilter 签名验证绕过漏洞(CVE-2026-50634) | 2026-06-12 | ||
| AVD-2026-50631 | Apache CXF AbstractOAuthDataProvider刷新令牌竞态条件漏洞(CVE-2026-50631) | 2026-06-12 | ||
| AVD-2026-50633 | Apache CXF JCA模块JNDI注入漏洞(CVE-2026-50633) | 2026-06-12 | ||
| AVD-2026-50623 | Apache CXF OAuth2 TokenIntrospectionService 认证绕过漏洞(CVE-2026-50623) | 2026-06-12 | ||
| AVD-2026-49875 | Apache CXF XXE 外部实体解析漏洞(CVE-2026-49875) | 2026-06-12 |