CVE-2022-45378

🗓️ 14 Nov 2022 00:00:00Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 145 Views

Apache SOAP RPCRouterServlet allows unauthenticated remote code execution in certain configurations

Reporter	Title	Published	Views	Family All 21
ATTACKERKB	CVE-2022-45378	14 Nov 202214:15	–	attackerkb
CNNVD	Apache SOAP 访问控制错误漏洞	14 Nov 202200:00	–	cnnvd
CNVD	Apache SOAP authentication error vulnerability	17 Nov 202200:00	–	cnvd
Cvelist	CVE-2022-45378 Apache SOAP allows unauthenticated users to potentially invoke arbitrary code	14 Nov 202200:00	–	cvelist
Github Security Blog	Apache SOAP contains unauthenticated RPCRouterServlet	14 Nov 202219:00	–	github
NCSC	Vulnerabilities fixed in Oracle Fusion Middleware	18 Apr 202400:00	–	ncsc
NCSC	Vulnerabilities fixed in Oracle Fusion Middleware	17 Jul 202413:54	–	ncsc
NVD	CVE-2022-45378	14 Nov 202214:15	–	nvd
Oracle	Oracle Critical Patch Update Advisory - April 2024	16 Apr 202400:00	–	oracle
Oracle	Oracle Critical Patch Update Advisory - July 2024	16 Jul 202400:00	–	oracle

NVD

Vulners

Vulnrichment

Node

apache soapRange≤2.3

[
  {
    "product": "Apache SOAP",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "Apache SOAP 2.3"
      },
      {
        "lessThan": "2.3",
        "status": "unknown",
        "version": "Apache SOAP",
        "versionType": "custom"
      }
    ]
  }
]