Although the 8.0.12 CR is using the version mentioned below already, the codebase should be aligned too.
rhn-support-ivassile, eleandro feel free to object or correct me if I assumed anything wrong here.

Tag: https://github.com/apache/cxf/releases/tag/cxf-4.0.10
Diff: https://github.com/apache/cxf/compare/cxf-4.0.4...cxf-4.0.10
Hash: ee9d57f0b1f53d24681fd3ebb5b4cb492ee8d180