CVE-2012-3451

CVE-2012-3451 describes a vulnerability in Apache CXF versions prior to 2.4.9, 2.5.5, and 2.6.2, allowing remote attackers to execute unintended web-service operations. This medium-severity flaw (CVSS 4.3) arises from an attacker sending a SOAP Action String in the header that is inconsistent with the message body, potentially leading to unauthorized data modification. While the vulnerability has a low EPSS score and FAUCET Risk Score, there is no known active exploitation, public exploit code, or significant community discussion or media coverage surrounding it.