EUVD-2018-0560

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Apache Axis 1.x up to 1.4 is vulnerable to cross-site scripting in default servlet/services.

Reporter	Title	Published	Views	Family All 65
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Axis affect IBM Maximo Asset Management and the IBM Maximo Manage application in IBM Maximo Application Suite	2 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities found in Axis.jar V1.x may affect IBM Content Collector for SAP Applications	26 Mar 202117:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect the IBM App Connect Enterprise Toolkit and the IBM Integration Bus Toolkit	30 Jun 202309:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Axis	28 Mar 202517:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilties	9 Jan 202015:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in Apache Axis, CKEditor4 & IBM MQ (CVE-2014-3596, CVE-2018-8032, CVE-2019-0227, CVE-2012-5784, CVE-2021-38986, CVE-2022-22321, CVE-2023-28439)	19 Mar 202515:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM System Storage Support for Microsoft Volume Shadow Copy Service and Virtual Disk Service is vulnerable to multiple vulnerabilities due to Apache Axis. CVE-2018-8032, CVE-2014-3596, CVE-2019-0227, CVE-2012-5784	13 Oct 202510:29	–	ibm
CNVD	Apache Axis Cross-Site Scripting Vulnerability	3 Aug 201800:00	–	cnvd
CVE	CVE-2018-8032	2 Aug 201813:00	–	cve

[
  {
    "enisaIdVendor": [
      {
        "id": "b384b789-1d9c-3597-aebe-a94ead88d17c",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "441a953e-5d4b-3d47-ac31-48a747332cba",
        "product": {
          "name": "Apache Axis"
        },
        "product_version": "1.x up to and including 1.4"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-8032
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
oracle	www.oracle.com/security-alerts/cpuoct2021.html
oracle	www.oracle.com/security-alerts/cpujul2022.html
oracle	www.oracle.com/security-alerts/cpujul2020.html
oracle	www.oracle.com/security-alerts/cpujan2021.html
oracle	www.oracle.com/security-alerts/cpujan2020.html
oracle	www.oracle.com/security-alerts/cpuapr2022.html
oracle	www.oracle.com/security-alerts/cpuapr2020.html
oracle	www.oracle.com/security-alerts/cpuApr2021.html

07 Oct 2025 00:30Current

7.2High risk

Vulners AI Score7.2

CVSS 3.16.1

CVSS 24.3

EPSS0.01707