Lucene search
K

CVE-2022-34269

🗓️ 25 Dec 2023 00:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 25 Views🌐 WEB

An authenticated remote attacker can perform a blind SSRF attack to deploy JSP code to the Apache Axis service running on the localhost interfac

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2022-34269
29 Feb 202401:35
attackerkb
CNNVD
RWS WorldServer Security Vulnerability
29 Feb 202400:00
cnnvd
Cvelist
CVE-2022-34269
25 Dec 202300:00
cvelist
NVD
CVE-2022-34269
29 Feb 202401:35
nvd
OSV
CVE-2022-34269
29 Feb 202401:35
osv
Prion
Server side request forgery (ssrf)
29 Feb 202401:35
prion
Positive Technologies
PT-2023-13354 · Apache · Apache Axis
25 Dec 202300:00
ptsecurity
RedhatCVE
CVE-2022-34269
23 May 202500:56
redhatcve
Vulnrichment
CVE-2022-34269
25 Dec 202300:00
vulnrichment
NVD
Vulnrichment
Node
rwsworldserverRange<11.7.3
ParameterPositionPathDescriptionCWE
system_idquery paramws-legacy/load_dtd?system_id=Authenticated SSRF via ws-legacy/load_dtd?system_id= leading to deployment of JSP code and potential command execution on Axis serviceCWE-918

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Apr 2025 18:21Current
7.2High risk
Vulners AI Score7.2
CVSS 3.18.8
EPSS0.03333
SSVC
25