Apache Axis2 has Improper Input Validation

🗓️ 17 May 2022 01:38:56Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 42 Views

Improper Input Validation in Apache Axis2/Java version 1.6.2 and earlie

Reporter	Title	Published	Views	Family All 17
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affects IBM Data Studio Client 4.2.0	29 Jan 202606:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler Premium - Text Analytics SSL Spoofing (CVE-2012-5785)	26 Sep 202205:45	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Axis2 related vulnerability for IBM Tivoli Directory Integrator (CVE-2012-5785)	26 Sep 202205:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	22 Jun 202215:20	–	ibm
IBM Security Bulletins	Security Bulletin: An IBM Business Process Manager SSL connection can be established without host name verification: CVE-2012-5785	25 Sep 202220:45	–	ibm
IBM Security Bulletins	Security Bulletin: InfoSphere Guardium Data Redaction affected by SSL vulnerability in Apache Axis2 (CVE-2012-5785)	25 Sep 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Product IMS Enterprise Suite SOAP Gateway (CVE-2012-5785, CVE-2013-0483)	25 Sep 202221:06	–	ibm
CVE	CVE-2012-5785	4 Nov 201222:00	–	cve
Cvelist	CVE-2012-5785	4 Nov 201222:00	–	cvelist
EUVD	EUVD-2022-5659	3 Oct 202520:07	–	euvd

Vulners

Node

org.apache.axis2 axis2-transport-httpRange<1.8.0maven

OR

org.apache.axis2 axis2Range<1.8.0maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2012-5785
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/79830
cs	www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
issues	www.issues.apache.org/jira/browse/AXIS2-6018
github	www.github.com/advisories/GHSA-wwq7-pxwc-p4rc

04 Dec 2025 22:13Current

9High risk

Vulners AI Score9

CVSS 25.8

EPSS0.00493

apache axis2 input validation ssl servers x.509 certificate man-in-the-middle