CVE security advisories and vulnerability history for cxf by apache.
46
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
3
Public exploits
With known exploit
7.1
Avg CVSS
2010–2026
Last updated
Overview
apache cxf has 46 published CVE records since 2010, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.1.
This page aggregates every publicly disclosed vulnerability (CVE) affecting apache cxf, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of apache cxf's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical3
High4
Medium5
Low0
34 additional CVEs have no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of apache cxf's CVEs are currently listed in CISA's KEV catalog.
Public exploits
3
3 of apache cxf's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every apache cxf version named in a CVE, then pick one to see only the CVEs that affect it.
