CVE-2012-3451

Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header…

published September 24, 2012

CVSS
—
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action String that is inconsistent with the message body.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08882 · 95.2th percentile
Published
2012-09-24T17:00Z
EPSS history
Timeline
  • 24 SEP 17:00Z
    Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header…
    cvelistv5