Skip to content
OpenAdvisories

Package · Debian

axis

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2018-8032 Public exploit EPSS 11%

    Moderate severity vulnerability that affects apache axis

    Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.

    Apache Software Foundation Apache Axis axis org.apache.axis:axis Debian Ubuntu Maven
  • Medium —
    CVE-2014-3596

    Improper Validation of Certificates in apache axis

    The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL…

    axis org.apache.axis:axis axis:axis Debian Maven
  • Medium —
    CVE-2012-5784

    Man-in-the-middle attack in Apache Axis

    Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name…

    axis org.apache.axis:axis axis:axis Debian Maven
  • Medium 5.3
    CVE-2007-2353 Public exploit EPSS 28%

    Apache Axis allows Exposure of Sensitive Information to an Unauthorized Actor

    Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the resulting exception message.

    axis org.apache.axis:axis Debian Maven