RHSA-2017:2637: apache-cxf Red Hat

CVSS: 8.1v3.0HighPublished

Published 20-09-2024Last modified 05-08-2026

Open JSON

Vulnerability summary

RHSA-2017:2637 is a high (CVSS 8.1) vulnerability in apache-cxf Red Hat.

Overall risk

32/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.1/10

010

High · v3.0 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 3 · Downstream 0

CVE-2017-5645 CVE-2017-5664 CVE-2017-7525

Timeline

20-09-2024
PublishedVulnerability first disclosed.
05-08-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.17 update on RHEL 5

CVSS metrics

1 score · 1 source · 1 version

v3.08.1

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat95 products

apache-cxf< 0:2.7.18-7.SP6_redhat_1.1.ep6.el5
codehaus-jackson< 0:1.9.9-11.redhat_5.1.ep6.el5
codehaus-jackson-core-asl< 0:1.9.9-11.redhat_5.1.ep6.el5
codehaus-jackson-jaxrs< 0:1.9.9-11.redhat_5.1.ep6.el5
codehaus-jackson-mapper-asl< 0:1.9.9-11.redhat_5.1.ep6.el5

codehaus-jackson-xc< 0:1.9.9-11.redhat_5.1.ep6.el5
hibernate4-core-eap6< 0:4.2.27-1.Final_redhat_1.1.ep6.el5
hibernate4-eap6< 0:4.2.27-1.Final_redhat_1.1.ep6.el5
hibernate4-entitymanager-eap6< 0:4.2.27-1.Final_redhat_1.1.ep6.el5
hibernate4-envers-eap6< 0:4.2.27-1.Final_redhat_1.1.ep6.el5
hibernate4-infinispan-eap6< 0:4.2.27-1.Final_redhat_1.1.ep6.el5
hornetq< 0:2.3.25-22.SP20_redhat_1.1.ep6.el5
infinispan< 0:5.2.22-1.Final_redhat_1.1.ep6.el5
infinispan-cachestore-jdbc< 0:5.2.22-1.Final_redhat_1.1.ep6.el5
infinispan-cachestore-remote< 0:5.2.22-1.Final_redhat_1.1.ep6.el5
infinispan-client-hotrod< 0:5.2.22-1.Final_redhat_1.1.ep6.el5
infinispan-core< 0:5.2.22-1.Final_redhat_1.1.ep6.el5
jboss-as-appclient< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-cli< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-client-all< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-clustering< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-cmp< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-configadmin< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-connector< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-controller< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-controller-client< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-core-security< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-deployment-repository< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-deployment-scanner< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-domain-http< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-domain-management< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-ee< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-ee-deployment< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-ejb3< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-embedded< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-host-controller< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-jacorb< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-jaxr< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-jaxrs< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-jdr< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-jmx< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-jpa< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-jsf< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-jsr77< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-logging< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-mail< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-management-client-content< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-messaging< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-modcluster< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-naming< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-network< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-osgi< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-osgi-configadmin< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-osgi-service< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-picketlink< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-platform-mbean< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-pojo< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-process-controller< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-protocol< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-remoting< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-sar< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-security< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-server< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-system-jmx< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-threads< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-transactions< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-version< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-web< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-webservices< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-weld< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-as-xts< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jboss-marshalling< 0:1.4.10-3.SP3_redhat_1.1.ep6.el5
jboss-metadata< 0:7.2.3-1.Final_redhat_1.1.ep6.el5
jboss-metadata-appclient< 0:7.2.3-1.Final_redhat_1.1.ep6.el5
jboss-metadata-common< 0:7.2.3-1.Final_redhat_1.1.ep6.el5
jboss-metadata-ear< 0:7.2.3-1.Final_redhat_1.1.ep6.el5
jboss-metadata-ejb< 0:7.2.3-1.Final_redhat_1.1.ep6.el5
jboss-metadata-web< 0:7.2.3-1.Final_redhat_1.1.ep6.el5
jboss-modules< 0:1.3.10-1.Final_redhat_1.1.ep6.el5
jboss-remoting3< 0:3.3.10-1.Final_redhat_1.1.ep6.el5
jboss-vfs2< 0:3.2.12-1.Final_redhat_1.1.ep6.el5
jbossas-appclient< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jbossas-bundles< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jbossas-core< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jbossas-domain< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jbossas-javadocs< 0:7.5.17-4.Final_redhat_4.1.ep6.el5
jbossas-modules-eap< 0:7.5.17-1.Final_redhat_4.1.ep6.el5
jbossas-product-eap< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jbossas-standalone< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jbossas-welcome-content-eap< 0:7.5.17-2.Final_redhat_4.1.ep6.el5
jbossweb< 0:7.5.24-1.Final_redhat_1.1.ep6.el5
log4j-eap6< 0:1.2.16-12.redhat_3.1.ep6.el5
log4j-jboss-logmanager< 0:1.1.4-1.Final_redhat_1.1.ep6.el5
picketlink-bindings< 0:2.5.4-17.SP15_redhat_1.1.ep6.el5
picketlink-federation< 0:2.5.4-17.SP15_redhat_1.1.ep6.el5

Show all 95

1 vendor · 95 products

References

19 links

Show all 19 references

access.redhat.com/security/cve/CVE-2017-5664REPORT
www.cve.org/CVERecord?id=CVE-2017-5664Advisory
nvd.nist.gov/vuln/detail/CVE-2017-5664Advisory
tomcat.apache.org/security-7.htmlARTICLE
tomcat.apache.org/security-8.htmlARTICLE
tomcat.apache.org/security-8.htmlARTICLE
access.redhat.com/security/cve/CVE-2017-7525REPORT
www.cve.org/CVERecord?id=CVE-2017-7525Advisory
nvd.nist.gov/vuln/detail/CVE-2017-7525Advisory