Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache SOAP

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2022-45378

    Apache SOAP allows unauthenticated users to potentially invoke arbitrary code

    In the default configuration of Apache SOAP, an RPCRouterServlet is available without authentication. This gives an attacker the possibility to invoke methods on the classpath that meet certain criteria. Depending on what classes are available on the classpat…

    Apache Software Foundation Apache SOAP soap:soap Maven