CVE:CVE-2019-17573
CNNVD:CNNVD-202001-832
Apache CXF是美国阿帕奇（Apache）软件基金会的一个开源的Web服务框架。该框架支持多种Web服务标准、多种前端编程API等。
Apache CXF中的/services页面存在安全漏洞。攻击者可利用该漏洞向Web页面中注入JavaScript代码。
solution:Upgrade apache cxf to a higher version than 3.2.12,3.3.5,and avoid the version [3.2.0,3.2.12],[3.3.0,3.3.5); Upgrade oracle commerce_guided_search to a higher version than 11.3.2,and avoid the version 11.3.2; Upgrade oracle communications_element_manager to a higher version than 8.1.1,8.2.0,8.2.1,and avoid the version 8.1.1,8.2.0,8.2.1; Upgrade oracle communications_session_report_manager to a higher version than 8.1.1,8.2.0,8.2.1,and avoid the version 8.1.1,8.2.0,8.2.1; Upgrade oracle communications_session_route_manager to a higher version than 8.1.1,8.2.0,8.2.1,and avoid the version 8.1.1,8.2.0,8.2.1; Upgrade oracle flexcube_private_banking to a higher version than 12.0.0,12.1.0,and avoid the version 12.0.0,12.1.0; Upgrade oracle retail_order_broker to a higher version than 15.0,and avoid the version 15.0