Threats affecting pkg:maven/org.apache.cxf/cxf

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.7%	CVE-2026-44930Apache CXF · LDAP Injection Medium4.3EPSS 0.7%2026-05-22CVE Database V5CVE-2026-44930 An LDAP injection vulnerability in the LDAP Certificate repository of the XKMS server in Apache CXF may allow an attacker to retrieve arbitrary certificates from the repository. Users are recommended to upgrade to versions 4.2.1, 4.1.6 or 3.6.11, which fix this issue. EPSS 0.7%Vulnerability Apache Software Foundation CWE-90	CVE Database V5	2026-05-22

Page 1 of 1