diff --git a/alfresco-docker-tika/pom.xml b/alfresco-docker-tika/pom.xml
index 71dc304f..1bfc90af 100644
--- a/alfresco-docker-tika/pom.xml
+++ b/alfresco-docker-tika/pom.xml
@@ -47,6 +47,17 @@
         <dependency>
             <groupId>org.alfresco</groupId>
             <artifactId>alfresco-data-model</artifactId>
+            <exclusion>
+                <groupId>org.apache.cxf</groupId>
+                <artifactId>cxf-rt-transports-http</artifactId>
+            </exclusion>
+        </dependency>
+
+        <!-- for Alfresco Data Model 8.8 (explicitly fix CVE) -->
+        <dependency>
+            <groupId>org.apache.cxf</groupId>
+            <artifactId>cxf-rt-transports-http</artifactId>
+            <version>3.1.16</version>
         </dependency>
 
         <dependency>
@@ -86,7 +97,7 @@
             </exclusions>
         </dependency>
 
-        <!-- for Apache Tika Parsers - eg. encrypted PDF -->
+        <!-- for Apache Tika Parsers 1.17-20180201-alfresco-patched (explicitly fix CVE) -->
         <dependency>
             <groupId>org.bouncycastle</groupId>
             <artifactId>bcprov-jdk15on</artifactId>