How many CVEs have patched handleMessage?

4 published CVEs changed handleMessage in apache/cxf, in 12 distinct patches totalling 44 changed lines, between 2012 and 2017.

What is the latest CVE that changed handleMessage?

CVE-2017-5653 (Improper Certificate Validation in Apache CXF), published 2017-04-18, changed lines 119 of rt/rs/security/xml/src/main/java/org/apache/cxf/rs/security/xml/XmlSecInInterceptor.java.

How does handleMessage compare to the rest of apache/cxf?

apache/cxf has 23 CVEs with a located fix in total; 4 of them changed handleMessage.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

handleMessage in apache/cxf: Patched by 4 CVEs

CVEs that patched it

Every published CVE whose fix changed handleMessage, newest first, with the lines each fix touched.

Improper Certificate Validation in Apache CXF
CVE-2017-5653 · rt/rs/security/xml/src/main/java/org/apache/cxf/rs/security/xml/XmlSecInInterceptor.java · line 119 · +0 −2
Medium · CVSS 5.3
EPSS 11.2%2017-04-18
Uncontrolled Resource Consumption in Apache CXF
CVE-2014-0110 · api/src/main/java/org/apache/cxf/interceptor/OutgoingChainInterceptor.java · lines 60–63 · +4 −0
Medium · CVSS 4.3
EPSS 3.6%2014-05-08
Uncontrolled Resource Consumption in Apache CXF
CVE-2014-0110 · core/src/main/java/org/apache/cxf/interceptor/OutgoingChainInterceptor.java · lines 60–63 · +4 −0
Medium · CVSS 4.3
EPSS 3.6%2014-05-08
Improper Authentication in Apache CXF
CVE-2012-5633 · api/src/main/java/org/apache/cxf/interceptor/URIMappingInterceptor.java · lines 78–80 · +3 −0
Medium · CVSS 5.8
EPSS 8.2%2013-03-12
Improper Authentication in Apache CXF
CVE-2012-5633 · rt/core/src/main/java/org/apache/cxf/interceptor/URIMappingInterceptor.java · lines 78–80 · +3 −0
Medium · CVSS 5.8
EPSS 8.2%2013-03-12
Improper Authentication in Apache CXF
CVE-2012-5633 · rt/ws/security/src/main/java/org/apache/cxf/ws/security/wss4j/WSS4JInInterceptor.java · lines 200–201 · +2 −0
Medium · CVSS 5.8
EPSS 8.2%2013-03-12
Remote web-service operation execution in Apache CXF
CVE-2012-3451 · api/src/main/java/org/apache/cxf/interceptor/DocLiteralInInterceptor.java · lines 194–198 · +5 −6
Medium · CVSS 4.3
EPSS 8.9%2012-09-24
Remote web-service operation execution in Apache CXF
CVE-2012-3451 · rt/bindings/soap/src/main/java/org/apache/cxf/binding/soap/interceptor/SoapActionInInterceptor.java · lines 98–101 · +4 −0
Medium · CVSS 4.3
EPSS 8.9%2012-09-24
Remote web-service operation execution in Apache CXF
CVE-2012-3451 · rt/core/src/main/java/org/apache/cxf/interceptor/DocLiteralInInterceptor.java · lines 195–199 · +5 −6
Medium · CVSS 4.3
EPSS 8.9%2012-09-24

Get an alert when the next CVE fix lands in apache/cxf, with the patched functions.

Monitor cxf CVEs

handleMessage

Overview

CVEs that patched it

Other functions in these files

Other hotspots in the repository

Frequently asked questions

References

Track apache/cxf CVEs