VA Scan Findings for Apache CXF in API Gateway 11.2
search cancel

VA Scan Findings for Apache CXF in API Gateway 11.2

book

Article ID: 452102

calendar_today

Updated On:

Products

CA API Gateway

Issue/Introduction

VA Report

Apache CXF < 4.1.7 / 4.2.x < 4.2.2 Multiple VulnerabilitiesHighCVE-2026-50623,CVE-2026-50629,CVE-2026-50630,CVE-2026-50631,CVE-2026-50632,CVE-2026-50633,CVE-2026-50634,CVE-2026-50645 

 

Environment

API Gateway 11.2

Resolution

Apply Platform Updates (Apache CXF): To address the Apache CXF findings and maintain overall system security compliance, you should apply the latest available Monthly Platform Package (MPP) or Monthly Solution Patch (MSP) releases.

    • The Apache CXF libraries are updated as part of the cumulative release cycle for API Gateway 11.2.x (e.g., the 11.2.1 August MSP and future 11.2.2 releases) which will be released end of August 2026.
Powered by Wolken Software