The vulnerability of the Apache Axis web service platform, which exists due to the lack of measures taken to protect the structure of the web page, allows attackers to carry out XSS attacks.

🗓️ 03 Dec 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Apache Axis web service platform is vulnerable to cross site scripting due to weak page protections.

Reporter	Title	Published	Views	Family All 66
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Axis affect IBM Maximo Asset Management and the IBM Maximo Manage application in IBM Maximo Application Suite	2 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities found in Axis.jar V1.x may affect IBM Content Collector for SAP Applications	26 Mar 202117:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect the IBM App Connect Enterprise Toolkit and the IBM Integration Bus Toolkit	30 Jun 202309:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Axis	28 Mar 202517:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilties	9 Jan 202015:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in Apache Axis, CKEditor4 & IBM MQ (CVE-2014-3596, CVE-2018-8032, CVE-2019-0227, CVE-2012-5784, CVE-2021-38986, CVE-2022-22321, CVE-2023-28439)	19 Mar 202515:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM System Storage Support for Microsoft Volume Shadow Copy Service and Virtual Disk Service is vulnerable to multiple vulnerabilities due to Apache Axis. CVE-2018-8032, CVE-2014-3596, CVE-2019-0227, CVE-2012-5784	13 Oct 202510:29	–	ibm
CNVD	Apache Axis Cross-Site Scripting Vulnerability	3 Aug 201800:00	–	cnvd
CVE	CVE-2018-8032	2 Aug 201813:00	–	cve

Vulners

Node

oracle primavera_unifierMatch16.2

oracle primavera_unifierMatch16.1

oracle tuxedoMatch12.1.1.0

oracle peoplesoft_enterprise_peopletoolsMatch8.56

oracle peoplesoft_enterprise_peopletoolsMatch8.57

oracle oracle_retail_order_brokerMatch15.0

oracle oracle_retail_order_brokerMatch16.0

oracle instantis_enterprisetrackMatch17.1

oracle instantis_enterprisetrackMatch17.2

oracle instantis_enterprisetrackMatch17.3

oracle oracle_hospitality_guest_accessMatch4.2.0

oracle oracle_hospitality_guest_accessMatch4.2.1

oracle primavera_unifierMatch18.8

oracle oracle_policy_automation_connector_for_siebelMatch10.4.6

apache axisRange1.0–1.4

oracle peoplesoft_enterprise_hcm_human_resourcesMatch9.2

oracle primavera_unifierMatch19.12

oracle oracle_communications_design_studioMatch7.3.4.3.0

oracle oracle_communications_design_studioMatch7.3.5.5.0

oracle oracle_communications_design_studioMatch7.4.0.4.0

oracle primavera_unifierRange17.7–17.12

oracle oracle_communications_design_studioMatch7.4.1.1.0

oracle tuxedoMatch12.1.3.0

oracle oracle_agile_plm_frameworkMatch9.3.3

oracle oracle_retail_order_brokerMatch18.0

oracle oracle_flexcube_private_bankingMatch12.0.0

oracle oracle_flexcube_private_bankingMatch12.1.0

oracle oracle_real-time_decision_serverMatch3.2.1.0

Source	Link
oracle	www.oracle.com/technetwork/topics/security/public-vuln-to-advisory-mapping-093627.html
oracle	www.oracle.com/security-alerts/cpuoct2019.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-8032
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
nvd	www.nvd.nist.gov/vuln/detail

21 Nov 2023 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.3

CVSS 36.1

EPSS0.01707