VendorsApacheneethiall versions
Vulnerabilities

Apache Neethi

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

11CVEs
CVE-2026-66143
Apache Neethi: Missing global alternative-output budget across policy computation paths
Published 2026-07-24 · Analyzed
7.5EPSS 0.009
CVE-2026-42403
Apache Neethi: Circular Policy Reference Infinite Loop
Published 2026-05-01 · Analyzed
7.5EPSS 0.008
CVE-2026-91863
Apache Neethi: Uncontrolled recursion while parsing crafted WS-Policy documents allows denial of service
Published 2026-09-21 · Analyzed
7.5EPSS 0.008
CVE-2026-66142
Apache Neethi: Uncontrolled recursion in policy processing
Published 2026-07-24 · Analyzed
7.5EPSS 0.007
CVE-2026-66144
Apache Neethi: Remote PolicyReference fetch lacks resource bounds
Published 2026-07-24 · Analyzed
7.5EPSS 0.007
CVE-2026-91864
Apache Neethi: Crafted WS-Policy documents bypass element/attribute limits causing memory exhaustion
Published 2026-09-21 · Analyzed
7.5EPSS 0.007
CVE-2026-91865
Apache Neethi: Crafted policy references cause exponential expansion during normalization leading to denial of service
Published 2026-09-21 · Analyzed
7.5EPSS 0.007
CVE-2026-91866
Apache Neethi: Crafted policies cause unbounded work during intersection leading to denial of service
Published 2026-09-21 · Analyzed
7.5EPSS 0.007
CVE-2026-42402
Apache Neethi: Policy Normalization Unbounded Resource Allocation DoS
Published 2026-05-01 · Analyzed
7.5EPSS 0.007
CVE-2026-42404
Apache Neethi: Unrestricted HTTP Redirect Following in Policy References
Published 2026-05-01 · Analyzed
7.2EPSS 0.005
CVE-2026-91867
Apache Neethi: Remote policy fetch lacks a total timeout, allowing a slow server to hang the request indefinitely
Published 2026-09-21 · Analyzed
4.3EPSS 0.005