[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWQF-lLeRTm6JVSEfFKDCTWhGm8t8J7Sg8pYbRqy9LsE":3,"g5a-risk:CVE-2014-3623":195},{"success":4,"data":5,"meta":193},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":15,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":41,"references":42,"referencesCount":128,"weaknesses":129,"weaknessesCount":138,"isActivelyExploited":139,"cisaInfo":15,"otxData":15,"relatedBlogPosts":140,"seoMetadata":141,"configurations":166,"relatedVendorCves":191,"notableEvents":192},"CVE-2014-3623","What is CVE-2014-3623?","Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBinding, does not properly enforce the SAML SubjectConfirmation method security semantics, which allows remote attackers to conduct spoofing attacks via unspecified vectors.","Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBinding, does not prop...","2014-10-30T14:55:07.833","2025-04-12T10:46:40.837",5,"AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":26,"ExploitabilityScore":27,"ImpactScore":28,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":25,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","NONE","PARTIAL","MEDIUM",10,2.9,0.09224,[29,29,29,29,29,29,29],"Medium",[33,38],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"apache","wss4j","*","cpe:2.3:a:apache:wss4j:*:*:*:*:*:*:*:*",{"vendor":34,"product":39,"version":36,"criteria":40,"vulnerable":4},"cxf","cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*",2,[43,48,51,54,57,62,66,71,75,80,83,86,89,92,95,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126],{"url":44,"source":45,"tags":46},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-0236.html","Red Hat",[47],"Third Party Advisory",{"url":49,"source":45,"tags":50},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-0675.html",[47],{"url":52,"source":45,"tags":53},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-0850.html",[47],{"url":55,"source":45,"tags":56},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-0851.html",[47],{"url":58,"source":59,"tags":60},"http:\u002F\u002Fseclists.org\u002Foss-sec\u002F2014\u002Fq4\u002F437","Seclists",[61,47],"Mailing List",{"url":63,"source":64,"tags":65},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F61909","Secunia",[47],{"url":67,"source":68,"tags":69},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F70736","Securityfocus",[47,70],"VDB Entry",{"url":72,"source":73,"tags":74},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F97754","Ibmcloud",[70],{"url":76,"source":77,"tags":78},"https:\u002F\u002Fissues.apache.org\u002Fjira\u002Fbrowse\u002FWSS-511","Apache",[79],"Vendor Advisory",{"url":81,"source":77,"tags":82},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E",[],{"url":84,"source":77,"tags":85},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E",[],{"url":87,"source":77,"tags":88},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E",[],{"url":90,"source":77,"tags":91},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E",[],{"url":93,"source":77,"tags":94},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E",[],{"url":96,"source":77,"tags":97},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E",[],{"url":44,"source":45,"tags":99},[47],{"url":49,"source":45,"tags":101},[47],{"url":52,"source":45,"tags":103},[47],{"url":55,"source":45,"tags":105},[47],{"url":58,"source":59,"tags":107},[61,47],{"url":63,"source":64,"tags":109},[47],{"url":67,"source":68,"tags":111},[47,70],{"url":72,"source":73,"tags":113},[70],{"url":76,"source":77,"tags":115},[79],{"url":81,"source":77,"tags":117},[],{"url":84,"source":77,"tags":119},[],{"url":87,"source":77,"tags":121},[],{"url":90,"source":77,"tags":123},[],{"url":93,"source":77,"tags":125},[],{"url":96,"source":77,"tags":127},[],30,[130],{"id":131,"name":132,"description":133,"extendedDescription":134,"status":135,"abstraction":136,"structure":137},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":142,"metaDescription":143,"keywords":144,"canonicalUrl":145,"structuredData":146},"What is CVE-2014-3623? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2014-3623, a medium severity cyber security vulnerability from 2014. Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used i...","CVE-2014-3623, CVE-2014-3623 vulnerability, CVE-2014-3623 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, apache security, wss4j vulnerability, cxf vulnerability","\u002Fwhat-is\u002Fcve-2014-3623",{"@context":147,"@type":148,"headline":142,"description":143,"datePublished":10,"dateModified":11,"author":149,"publisher":153,"about":157,"mainEntityOfPage":161,"articleSection":164,"keywords":165},"https:\u002F\u002Fschema.org","TechArticle",{"@type":150,"name":151,"url":152},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":150,"name":151,"url":152,"logo":154},{"@type":155,"url":156},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":158,"name":6,"description":159,"additionalType":160},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":162,"@id":163},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2014-3623","Cybersecurity","CVE-2014-3623, CVE-2014-3623 vulnerability, CVE-2014-3623 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[167,179],{"Operator":15,"Negate":15,"Nodes":168},[169],{"Operator":170,"Negate":15,"CPEMatch":171},"OR",[172,175],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":173,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":174,"VersionEndIncluding":15},"87421C07-0C3B-4853-8D71-C730A859FF18","1.6.17",{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":176,"VersionStartExcluding":15,"VersionStartIncluding":177,"VersionEndExcluding":178,"VersionEndIncluding":15},"0DFCE4C7-55C0-4FAF-9115-E8281E9C4BE0","2.0.0","2.0.2",{"Operator":15,"Negate":15,"Nodes":180},[181],{"Operator":170,"Negate":15,"CPEMatch":182},[183,187],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":184,"VersionStartExcluding":15,"VersionStartIncluding":185,"VersionEndExcluding":15,"VersionEndIncluding":186},"5332D81D-EAFA-422E-A9DF-DC322301BFBB","2.7.0","2.7.13",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":188,"VersionStartExcluding":15,"VersionStartIncluding":189,"VersionEndExcluding":190,"VersionEndIncluding":15},"507176A5-89F5-448B-8411-1B88189E65F5","3.0.0","3.0.2",[],[],{"lastModified":11,"cacheTime":194,"version":21},1792248366200,{"score":196,"band":197,"action":198,"scoredAt":199},24,"Low","Monitor","2026-10-16T06:38:46.493989+00:00"]