CVE:CVE-2021-30468
CNNVD:CNNVD-202106-1306
Apache CXF是美国阿帕奇（Apache）基金会的一个开源的Web服务框架。该框架支持多种Web服务标准、多种前端编程API等。
Apache CXF存在资源管理错误漏洞，该漏洞源于Apache CXF的JsonMapObjectReaderWriter中的一个漏洞允许攻击者可利用该漏洞向web服务提交畸形的JSON，这将导致线程陷入无限循环，无限期地消耗CPU。
solution:Upgrade apache cxf to a higher version than 3.3.11,3.4.4,and avoid the version (,3.3.11),[3.4.0,3.4.4); Upgrade apache tomee to a higher version than 8.0.6,and avoid the version 8.0.6; Upgrade oracle business_intelligence to a higher version than 5.5.0.0.0,5.9.0.0.0,12.2.1.3.0,12.2.1.4.0,and avoid the version 5.5.0.0.0,5.9.0.0.0,12.2.1.3.0,12.2.1.4.0; Upgrade oracle communications_element_manager to a higher version than 8.2.2,and avoid the version 8.2.2; Upgrade oracle communications_messaging_server to a higher version than 8.1,and avoid the version 8.1