VULNERABILITY INTELLIGENCE

CVE-2012-5633

CVSS score5.8 MEDIUM

EPSS probability8.16%

CISA KEVNot currently listed

Published2013-03-12

Last modified2026-06-16

Description

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request.