Common Vulnerabilities and Exposures Access token validation errors affects all versions of Apache CXF prior to 3.3.4 and 3.2.11.