Lucene search

K
f5F5F5:K58530825
HistoryNov 20, 2019 - 12:00 a.m.

K58530825 : Apache CXF vulnerability CVE-2017-5653

2019-11-2000:00:00
my.f5.com
8

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.3%

Security Advisory Description

JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers. (CVE-2017-5653)

Impact

There is no impact; F5 products are not affected by this vulnerability.

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.3%