38 CVEs
org.apache.cxf Vulnerabilities
CVE security advisories and vulnerability history for org.apache.cxf.
38
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
3
Public exploits
With known exploit
7.6
Avg CVSS
2010–2025
Overview
org.apache.cxf has 38 published CVE records since 2010, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.
This page aggregates every publicly disclosed vulnerability (CVE) affecting org.apache.cxf products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.
Severity and exploitation
How the CVSS severity of org.apache.cxf's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.