| Reporter | Title | Published | Views | Family All 33 |
|---|---|---|---|---|
 | Apache Axis2 Default Credentials | 27 May 201000:00 | – | nessus |
 | CVE-2010-0219 | 14 Dec 201000:00 | – | circl |
 | CA ARCserve D2D Axis2 Default Credentials Remote Code Execution (CVE-2010-0219) | 8 Feb 201100:00 | – | checkpoint_advisories |
 | CVE-2010-0219 | 18 Oct 201016:00 | – | cvelist |
 | CA ARCserve D2D r15 - Web Service Servlet Code Execution | 30 Dec 201000:00 | – | exploitdb |
| Axis2 - (Authenticated) Code Execution (via REST) (Metasploit) | 14 Dec 201000:00 | – | exploitdb |
| Axis2 / SAP BusinessObjects - (Authenticated) Code Execution (via SOAP) (Metasploit) | 14 Dec 201000:00 | – | exploitdb |
 | CVE-2010-0219 | 3 Oct 202617:28 | – | kitploit |
 | Apache Axis2 Brute Force Utility | 28 May 201419:31 | – | metasploit |
| Axis2 / SAP BusinessObjects Authenticated Code Execution (via SOAP) | 30 Dec 201000:00 | – | metasploit |
10
10
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| userName | request body | /axis2/axis2-admin/login | Axis2 admin login endpoint vulnerable due to default admin credentials enabling access to REST-based upload/execution. | CWE-255 |
| password | request body | /axis2/axis2-admin/login | Axis2 admin login endpoint vulnerable due to default admin credentials enabling access to REST-based upload/execution. | CWE-255 |
| filename | binary | /axis2/axis2-admin/upload | Upload endpoint that accepts a binary artifact (jar) to deploy a malicious web service for remote code execution. | CWE-255 |
| name | path | /axis2/services/{name}/run | Endpoint to run the deployed web service, triggering execution of the uploaded payload. | CWE-255 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Jun 2026 23:15Current
7.8High risk
Vulners AI Score7.8
CVSS 210
EPSS0.90851