Skip to content

Vendor

org.codehaus.xfire vulnerabilities

1 published CVE affecting org.codehaus.xfire, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of org.codehaus.xfire alerts

Products

Latest org.codehaus.xfire CVEs

Newest publication first

  1. CVE-2012-5817 Improper Input Validation in XFire

    Published
    HighCVSS 7.4

    Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.