CVE-2023-51441

🗓️ 06 Jan 2024 11:59:37Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 46 Views

Improper Input Validation vulnerability in Apache Axis allowed SSRF through the admin service. Users with access to the admin service are affected. Migrate to Apache Axis 2/Java or apply patch from GitHub

Reporter	Title	Published	Views	Family All 35
ibm	Security Bulletin: Apache Axis1 CVE-2023-51441 security vulnerability in FileNet Content Manager, Process Engine Process Orchestration	9 Jul 202515:16	–	ibm
ibm	Security Bulletin: IBM Tivoli Application Dependency Discovery Manager is vulnerable to server-side request forgery attack.	10 Jun 202512:35	–	ibm
ibm	Security Bulletin: Apache axis.jar is present in older Statistics releases that use IBM SPSS C&DS	25 Mar 202515:04	–	ibm
ibm	Security Bulletin: IBM B2B Sterling Integrator is affected by Apache Axis vulnerability to server-side request forgery	14 Nov 202416:32	–	ibm
ibm	Security Bulletin: IBM System Storage Support for Microsoft Volume Shadow Copy Service and Virtual Disk Service is vulnerable to an improper input validation vulnerability due to Apache Axis. CVE-2023-51441.	27 Oct 202516:14	–	ibm
circl	CVE-2023-51441	6 Jan 202413:21	–	circl
cnnvd	Apache Axis 代码问题漏洞	6 Jan 202400:00	–	cnnvd
cnvd	Apache Axis Code Issue Vulnerability	11 Jan 202400:00	–	cnvd
cve	CVE-2023-51441	6 Jan 202411:59	–	cve
cvelist	CVE-2023-51441 Apache Axis 1.x (EOL) may allow SSRF when untrusted input is passed to the service admin HTTP API	6 Jan 202411:59	–	cvelist

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	any	axis	1.4-28+deb11u1	axis_1.4-28+deb11u1_any.deb
Debian	12	any	axis	1.4-28+deb12u1	axis_1.4-28+deb12u1_any.deb
Debian	13	any	axis	1.4-29	axis_1.4-29_any.deb
Debian	14	any	axis	1.4-29	axis_1.4-29_any.deb
Debian	999	any	axis	1.4-29	axis_1.4-29_any.deb

06 Jan 2024 11:59Current

7High risk

Vulners AI Score7

CVSS 3.17.2

EPSS0.01213

SSVC