CVE-2012-5633: Apache Cxf

Medium severity, CVSS 5.8. EPSS: 8.2% chance of exploitation in the next 30 days.

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request.

Affected products

• Apache Cxf: up to and including 2.5.7; version 2.5.0 only; version 2.5.1 only; version 2.5.2 only; version 2.5.3 only; version 2.5.4 only; …

Published 2013-03-12. Last modified 2026-06-16.