Skip to content
OpenAdvisories

Package · Maven

org.apache.axis2:axis2

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2012-5785

    Apache Axis2 has Improper Input Validation

    Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitra…

    org.apache.axis2:axis2 org.apache.axis2:axis2-transport-http Maven
  • Medium —
    CVE-2012-4418

    Apache Axis2 Vulnerable to XML Signature wrapping attack

    Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."

    org.apache.axis2:axis2 Maven
  • Medium —
    CVE-2012-5351

    Improper Authentication in Apache Axis2

    Apache Axis2 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack," a different vulnerability than CVE-2012-4418.

    org.apache.axis2:axis2 Maven