Jboss Fuse Esb Enterprise
1 CVEs
product
Monthly
Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity.
Apache
Information Disclosure
Cxf
Jboss Enterprise Application Platform
Jboss Enterprise Portal Platform
+3
NVD
CVSS 2.0
6.4
EPSS
9.5%
CVE-2012-5575
Maven
EPSS 10%
CVSS 6.4
MEDIUM
PATCH
This Month
Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity.
Apache
Information Disclosure
Cxf
+5
NVD