apache cxf CVE-2014-0034 in Apache and Red Hat Products
Published on July 7, 2014

product logo product logo
The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2014-0034

stack.watch emails you whenever new vulnerabilities are published in Apache CXF or Red Hat Jboss Enterprise Application Platform. Just hit a watch button to start following.

Apache CXF
 
Red Hat Jboss Enterprise Application Platform
 

Exploit Probability

EPSS
1.86%
Percentile
82.78%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.