Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Axis

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2023-40743

    Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService

    ** UNSUPPORTED WHEN ASSIGNED ** When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through "ServiceFactory.getService" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted …

    Apache Software Foundation Apache Axis axis org.apache.axis:axis Debian Ubuntu Maven