Threats affecting pkg:maven/Apache Software Foundation/org.apache.cxf:cxf-rt-ws-transfer

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-44618Apache CXF · XML External Entity (XXE) Medium5.3EPSS 0.3%2026-05-22CVE Database V5CVE-2026-44618 CVE-2026-44618 is a medium severity vulnerability in Apache CXF's WS-Transfer module caused by insecure XML parser configuration that allows XML External Entity (XXE) attacks. This vulnerability affects Apache CXF versions 4.2.0 and 4.0.0. The issue is addressed in Apache CXF versions 4.2.1, 4.1. EPSS 0.3%Vulnerability Apache Software Foundation CWE-611	CVE Database V5	2026-05-22

Page 1 of 1