CVE:CVE-2019-12419
CNNVD:CNNVD-201911-342
Apache CXF是美国阿帕奇（Apache）基金会的一个开源的Web服务框架。该框架支持多种Web服务标准、多种前端编程API等。
Apache CXF 中存在授权问题漏洞。该漏洞源于访问令牌服务中存在一个漏洞，它无法验证经过身份验证的主体是否等于请求中提供的 clientId 参数的主体。
solution:Upgrade apache cxf to a higher version than 3.2.11,3.3.4,and avoid the version [3.2.0,3.2.11),[3.3.0,3.3.4); Upgrade oracle commerce_guided_search to a higher version than 11.3.2,and avoid the version 11.3.2; Upgrade oracle enterprise_manager_base_platform to a higher version than 13.2.1.0,and avoid the version 13.2.1.0; Upgrade oracle flexcube_private_banking to a higher version than 12.0.0,12.1.0,and avoid the version 12.0.0,12.1.0; Upgrade oracle retail_order_broker to a higher version than 15.0,and avoid the version 15.0