diff --git a/modules/dxp/apps/commerce-punchout/headless/headless-commerce-punchout-impl/build.gradle b/modules/dxp/apps/commerce-punchout/headless/headless-commerce-punchout-impl/build.gradle
index 0e2778e1bc691658afbbb78dbbae20524058de7c..424420605e78fd81d2a9910cab77b3e97d1dbae7 100644
--- a/modules/dxp/apps/commerce-punchout/headless/headless-commerce-punchout-impl/build.gradle
+++ b/modules/dxp/apps/commerce-punchout/headless/headless-commerce-punchout-impl/build.gradle
@@ -8,13 +8,13 @@ dependencies {
 	compileOnly group: "javax.servlet", name: "javax.servlet-api", version: "3.0.1"
 	compileOnly group: "javax.validation", name: "validation-api", version: "2.0.1.Final"
 	compileOnly group: "javax.ws.rs", name: "javax.ws.rs-api", version: "2.1"
-	compileOnly group: "org.apache.cxf", name: "cxf-core", version: "3.2.14"
-	compileOnly group: "org.apache.cxf", name: "cxf-rt-frontend-jaxrs", version: "3.2.14"
-	compileOnly group: "org.apache.cxf", name: "cxf-rt-rs-extension-providers", version: "3.2.14"
-	compileOnly group: "org.apache.cxf", name: "cxf-rt-rs-security-jose", version: "3.2.14"
-	compileOnly group: "org.apache.cxf", name: "cxf-rt-rs-security-jose-jaxrs", version: "3.2.14"
-	compileOnly group: "org.apache.cxf", name: "cxf-rt-rs-security-oauth2", version: "3.2.14"
-	compileOnly group: "org.apache.cxf", name: "cxf-rt-security", version: "3.2.14"
+	compileOnly group: "org.apache.cxf", name: "cxf-core", version: "3.5.10"
+	compileOnly group: "org.apache.cxf", name: "cxf-rt-frontend-jaxrs", version: "3.5.10"
+	compileOnly group: "org.apache.cxf", name: "cxf-rt-rs-extension-providers", version: "3.5.10"
+	compileOnly group: "org.apache.cxf", name: "cxf-rt-rs-security-jose", version: "3.5.10"
+	compileOnly group: "org.apache.cxf", name: "cxf-rt-rs-security-jose-jaxrs", version: "3.5.10"
+	compileOnly group: "org.apache.cxf", name: "cxf-rt-rs-security-oauth2", version: "3.5.10"
+	compileOnly group: "org.apache.cxf", name: "cxf-rt-security", version: "3.5.10"
 	compileOnly group: "org.osgi", name: "org.osgi.core", version: "6.0.0"
 	compileOnly group: "org.osgi", name: "org.osgi.service.component", version: "1.3.0"
 	compileOnly group: "org.osgi", name: "org.osgi.service.component.annotations", version: "1.3.0"