CVE-2015-5175

CWE-20 — Improper Input Validation4 documents4 sources
Severity
7.5HIGH
EPSS
13.6%
top 5.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apache CXF Fediz
Timeline
PublishedJun 7
Latest updateOct 18

Description

Application plugins in Apache CXF Fediz before 1.1.3 and 1.2.x before 1.2.1 allow remote attackers to cause a denial of service.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶Mavenorg.apache.cxf.fediz:fediz-idp1.2 — 1.2.1+1
▶Mavenorg.apache.cxf.fediz:fediz-core1.2 — 1.2.1+1
▶NVDapache/cxf_fediz1.1.2+1

Patches

Patch: cxf.apache.org ↗Patch: cxf.apache.org ↗

🔴Vulnerability Details

3
GHSA
Apache CXF Fediz application plugins are vulnerable to Denial of Service (DoS) attacks↗2018-10-18
▶
OSV
Apache CXF Fediz application plugins are vulnerable to Denial of Service (DoS) attacks↗2018-10-18
▶
CVEList
CVE-2015-5175: Application plugins in Apache CXF Fediz before 1↗2017-06-07
▶
CVE-2015-5175 (HIGH CVSS 7.5) | Application plugins in Apache CXF F | cvebase.io