CVE:CVE-2021-22696
CNNVD:CNNVD-202104-117
Apache CXF是美国阿帕奇（Apache）基金会的一个开源的Web服务框架。该框架支持多种Web服务标准、多种前端编程API等。
Apache CXF 存在代码问题漏洞，攻击者可利用该漏洞DDos攻击，以下产品及版本受到影响：Apache CXF versions prior to 3.4.3; Apache CXF versions prior to 3.3.10。
solution:Upgrade apache cxf to a higher version than 3.3.10,3.4.3,and avoid the version (,3.3.10),[3.4.0,3.4.3); Upgrade oracle business_intelligence to a higher version than 5.5.0.0.0,5.9.0.0.0,12.2.1.3.0,12.2.1.4.0,and avoid the version 5.5.0.0.0,5.9.0.0.0,12.2.1.3.0,12.2.1.4.0; Upgrade oracle communications_diameter_intelligence_hub to a higher version than 8.1.0,8.2.3,and avoid the version [8.0.0,8.1.0],[8.2.0,8.2.3]; Upgrade oracle communications_element_manager to a higher version than 8.2.2,and avoid the version 8.2.2; Upgrade oracle communications_session_report_manager to a higher version than 8.2.4.0,and avoid the version [8.0.0,8.2.4.0]; Upgrade oracle communications_session_route_manager to a higher version than 8.2.4,and avoid the version [8.0.0,8.2.4]