Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Axis2/Java

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Feed

  • Critical 9.8
    CVE-2026-66713

    Apache Axis2/Java: deserialization of untrusted Data

    Deserialization of Untrusted Data (CWE-502) in the Tribes-based clustering component  in Apache Software Foundation Apache Axis2/Java through 2.0.0 on Apache Tomcat  (only when Tribes clustering is enabled, which is off by default) allows an  unauthenticated …

    Apache Software Foundation Apache Axis2/Java