CVE-2013-2160
Apache Cxf < 2.5.10 - Resource Management Error
Title source: ruleDescription
The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via crafted XML with a large number of (1) elements, (2) attributes, (3) nested constructs, and possibly other vectors.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by SEC Consult · textdosmultiple
https://www.exploit-db.com/exploits/26710
References (12)
Scores
EPSS
0.1225
EPSS Percentile
93.9%
Details
CWE
CWE-399
Status
published
Products (22)
apache/cxf
2.5.0
apache/cxf
2.5.1
apache/cxf
2.5.2
apache/cxf
2.5.3
apache/cxf
2.5.4
apache/cxf
2.5.5
apache/cxf
2.5.6
apache/cxf
2.5.7
apache/cxf
2.5.8
apache/cxf
2.5.9
... and 12 more
Published
Aug 19, 2013
Tracked Since
Feb 18, 2026