Skip to content
OpenAdvisories

Package · Debian

axis

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-90436 Public exploit

    Apache Axis 1.x (EOL): unauthenticated remote class instantiation via SOAP fault exceptionName

    ** UNSUPPORTED WHEN ASSIGNED ** Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP <Fault> carries a <detail><exceptionName> element, Axis loads the named class and, if a String <data> el…

    Apache Software Foundation Apache Axis 1.x (EOL) axis axis Debian Ubuntu