Skip to content
OpenAdvisories

Package · Debian

axis

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2019-0227 Public exploit EPSS 92%

    Server Side Request Forgery in Apache Axis

    A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from so…

    Apache Apache Axis 1.4 axis org.apache.axis:axis Debian Ubuntu Maven
  • Medium 6.1
    CVE-2018-8032 Public exploit EPSS 11%

    Moderate severity vulnerability that affects apache axis

    Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.

    Apache Software Foundation Apache Axis axis org.apache.axis:axis Debian Ubuntu Maven
  • Medium 5.3
    CVE-2007-2353 Public exploit EPSS 28%

    Apache Axis allows Exposure of Sensitive Information to an Unauthorized Actor

    Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the resulting exception message.

    axis org.apache.axis:axis Debian Maven