Server Side Request Forgery in Apache Axis

🗓️ 14 May 2019 04:02:24Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 652 Views

Server Side Request Forgery in Apache Axis 1.

Reporter	Title	Published	Views	Family All 69
0day.today	Apache Axis 1.4 - Remote Code Execution Exploit	9 Apr 201900:00	–	zdt
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Axis affect IBM Maximo Asset Management and the IBM Maximo Manage application in IBM Maximo Application Suite	2 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities found in Axis.jar V1.x may affect IBM Content Collector for SAP Applications	26 Mar 202117:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect the IBM App Connect Enterprise Toolkit and the IBM Integration Bus Toolkit	30 Jun 202309:23	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.9 addresses multiple security vulnerabilities.	18 Jul 202313:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Axis	28 Mar 202517:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in Apache Axis, CKEditor4 & IBM MQ (CVE-2014-3596, CVE-2018-8032, CVE-2019-0227, CVE-2012-5784, CVE-2021-38986, CVE-2022-22321, CVE-2023-28439)	19 Mar 202515:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM System Storage Support for Microsoft Volume Shadow Copy Service and Virtual Disk Service is vulnerable to multiple vulnerabilities due to Apache Axis. CVE-2018-8032, CVE-2014-3596, CVE-2019-0227, CVE-2012-5784	13 Oct 202510:29	–	ibm
GithubExploit	Exploit for Server-Side Request Forgery in Apache Axis	16 May 202612:37	–	githubexploit

Vulners

Node

axis axis_osRange≤1.4maven

org.apache.axis axisRange≤1.4maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-0227
lists	www.lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c@%3Cannounce.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuapr2020.html
oracle	www.oracle.com/security-alerts/cpujan2020.html
oracle	www.oracle.com/security-alerts/cpujul2020.html
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
oracle	www.oracle.com/security-alerts/cpuApr2021.html
oracle	www.oracle.com/security-alerts/cpujan2021.html
lists	www.lists.apache.org/thread.html/r3a5baf5d76f1f2181be7f54da3deab70d7a38b5660b387583d05a8cd@%3Cjava-user.axis.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuoct2021.html

21 Jun 2024 21:33Current

3.9Low risk

Vulners AI Score3.9

CVSS 25.4

CVSS 3.17.5

EPSS0.89966

CWE-918