What’s Vulnerable › Products

Apache Software Foundation Apache Neethi vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Check whether your Apache Software Foundation Apache Neethi version is affected

Latest Apache Software Foundation Apache Neethi vulnerabilities

• CVE-2026-91867 — Apache Neethi: Remote policy fetch lacks a total timeout, allowing a slow server to hang the request indefinitely (CVSS 4.3)
• CVE-2026-91866 — Apache Neethi: Crafted policies cause unbounded work during intersection leading to denial of service (CVSS 7.5)
• CVE-2026-91865 — Apache Neethi: Crafted policy references cause exponential expansion during normalization leading to denial of service (CVSS 7.5)
• CVE-2026-91864 — Apache Neethi: Crafted WS-Policy documents bypass element/attribute limits causing memory exhaustion (CVSS 7.5)
• CVE-2026-91863 — Apache Neethi: Uncontrolled recursion while parsing crafted WS-Policy documents allows denial of service (CVSS 7.5)
• CVE-2026-66144 — Apache Neethi: Remote PolicyReference fetch lacks resource bounds (CVSS 7.5)
• CVE-2026-66143 — Apache Neethi: Missing global alternative-output budget across policy computation paths (CVSS 7.5)
• CVE-2026-66142 — Apache Neethi: Uncontrolled recursion in policy processing (CVSS 7.5)
• CVE-2026-42404 — Apache Neethi: Unrestricted HTTP Redirect Following in Policy References (CVSS 7.2)
• CVE-2026-42403 — Apache Neethi: Circular Policy Reference Infinite Loop (CVSS 7.5)
• CVE-2026-42402 — Apache Neethi: Policy Normalization Unbounded Resource Allocation DoS (CVSS 7.5)