Vulnerability details
CVE-2025-48913
Apache Software Foundation Apache CXF
Apache CXF: Untrusted JMS configuration can lead to RCE
CVSS 3.1
9.8Critical
Official description
If untrusted users are allowed to configure JMS for Apache CXF, previously they could use RMI or LDAP URLs, potentially leading to code execution capabilities. This interface is now restricted to reject those protocols, removing this possibility. Users are recommended to upgrade to versions 3.6.8, 4.0.9 or 4.1.3, which fix this issue.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.8Critical | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Apache Software Foundation | Apache CXF | v < 3.6.8 | CVEProject cvelistV5 (CNA) |
| Apache Software Foundation | Apache CXF | 4.0.0 ≤ v < 4.0.9 | CVEProject cvelistV5 (CNA) |
| Apache Software Foundation | Apache CXF | 4.1.0 ≤ v < 4.1.3 | CVEProject cvelistV5 (CNA) |
References and advisories
2
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-08-08
- Last updated
- 2026-02-26
- State
- Published
- Assigner (CNA)
- apache
Exploit prediction (EPSS)
1.07%
Probability of exploitation in 30 days
65%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-20Improper Input Validation