Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2018-8032
HistoryAug 02, 2018 - 1:29 p.m.

CVE-2018-8032

2018-08-0213:29:00
CWE-79
[email protected]
web.nvd.nist.gov
6

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.004

Percentile

72.1%

JSON

Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.

Affected configurations

Nvd
Node
apacheaxisRange1.0–1.4
Node
oracleagile_engineering_data_managementMatch6.2.1.0
OR
oracleagile_product_lifecycle_management_frameworkMatch9.3.3
OR
oracleapplication_testing_suiteMatch13.2.0.1
OR
oracleapplication_testing_suiteMatch13.3.0.1
OR
oraclebig_data_discoveryMatch1.6
OR
oraclecommunications_asap_cartridgesMatch7.2
OR
oraclecommunications_asap_cartridgesMatch7.3
OR
oraclecommunications_design_studioMatch7.3.4.3.0
OR
oraclecommunications_design_studioMatch7.3.5.5.0
OR
oraclecommunications_design_studioMatch7.4.0.4.0
OR
oraclecommunications_design_studioMatch7.4.1.1.0
OR
oraclecommunications_element_managerMatch8.0.0
OR
oraclecommunications_element_managerMatch8.1.0
OR
oraclecommunications_element_managerMatch8.1.1
OR
oraclecommunications_element_managerMatch8.2.0
OR
oraclecommunications_network_integrityMatch7.3.5
OR
oraclecommunications_network_integrityMatch7.3.6
OR
oraclecommunications_order_and_service_managementMatch7.3.0.0.0
OR
oraclecommunications_order_and_service_managementMatch7.4
OR
oraclecommunications_session_report_managerMatch8.0.0
OR
oraclecommunications_session_report_managerMatch8.1.0
OR
oraclecommunications_session_report_managerMatch8.1.1
OR
oraclecommunications_session_report_managerMatch8.2.0
OR
oraclecommunications_session_route_managerMatch8.0.0
OR
oraclecommunications_session_route_managerMatch8.1.0
OR
oraclecommunications_session_route_managerMatch8.1.1
OR
oraclecommunications_session_route_managerMatch8.2.0
OR
oracleendeca_information_discovery_studioMatch3.2.0
OR
oracleenterprise_manager_base_platformMatch12.1.0.5
OR
oracleenterprise_manager_base_platformMatch13.3.0.0
OR
oracleenterprise_manager_for_fusion_middlewareMatch12.1.0.5
OR
oraclefinancial_services_analytical_applications_infrastructureRange7.3.3–7.3.5
OR
oraclefinancial_services_analytical_applications_infrastructureRange8.0.0–8.0.8
OR
oraclefinancial_services_compliance_regulatory_reportingRange8.0.6–8.0.8
OR
oraclefinancial_services_funds_transfer_pricingRange8.0.2–8.0.7
OR
oracleflexcube_core_bankingMatch11.7.0
OR
oracleflexcube_core_bankingMatch11.8.0
OR
oracleflexcube_core_bankingMatch11.9.0
OR
oracleflexcube_core_bankingMatch11.10.0
OR
oracleflexcube_private_bankingMatch12.0.0
OR
oracleflexcube_private_bankingMatch12.1.0
OR
oraclehospitality_guest_accessMatch4.2.0
OR
oraclehospitality_guest_accessMatch4.2.1
OR
oracleinstantis_enterprisetrackMatch17.1
OR
oracleinstantis_enterprisetrackMatch17.2
OR
oracleinstantis_enterprisetrackMatch17.3
OR
oracleinternet_directoryMatch12.2.1.3.0
OR
oracleinternet_directoryMatch12.2.1.4.0
OR
oracleknowledgeRange8.6.0–8.6.3
OR
oraclepeoplesoft_enterprise_human_capital_management_human_resourcesMatch9.2
OR
oraclepeoplesoft_enterprise_peopletoolsMatch8.56
OR
oraclepeoplesoft_enterprise_peopletoolsMatch8.57
OR
oraclepeoplesoft_enterprise_peopletoolsMatch8.58
OR
oraclepolicy_automation_connector_for_siebelMatch10.4.6
OR
oracleprimavera_gatewayMatch16.2.11
OR
oracleprimavera_gatewayMatch17.12.6
OR
oracleprimavera_unifierRange17.7–17.12
OR
oracleprimavera_unifierMatch16.1
OR
oracleprimavera_unifierMatch16.2
OR
oracleprimavera_unifierMatch18.8
OR
oracleprimavera_unifierMatch19.12
OR
oraclerapid_planningMatch12.1
OR
oraclerapid_planningMatch12.2
OR
oraclereal-time_decision_serverMatch3.2.1.0
OR
oracleretail_order_brokerMatch15.0
OR
oracleretail_order_brokerMatch16.0
OR
oracleretail_order_brokerMatch18.0
OR
oracleretail_xstore_point_of_serviceMatch7.1
OR
oraclesecure_global_desktopMatch5.4
OR
oraclesecure_global_desktopMatch5.5
OR
oraclesiebel_ui_frameworkRange≤21.0
OR
oracletuxedoMatch12.1.1.0.0
OR
oracletuxedoMatch12.1.3
OR
oraclewebcenter_portalMatch12.2.1.3.0
Node
debiandebian_linuxMatch9.0
VendorProductVersionCPE
apacheaxis*cpe:2.3:a:apache:axis:*:*:*:*:*:*:*:*
oracleagile_engineering_data_management6.2.1.0cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*
oracleagile_product_lifecycle_management_framework9.3.3cpe:2.3:a:oracle:agile_product_lifecycle_management_framework:9.3.3:*:*:*:*:*:*:*
oracleapplication_testing_suite13.2.0.1cpe:2.3:a:oracle:application_testing_suite:13.2.0.1:*:*:*:*:*:*:*
oracleapplication_testing_suite13.3.0.1cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*
oraclebig_data_discovery1.6cpe:2.3:a:oracle:big_data_discovery:1.6:*:*:*:*:*:*:*
oraclecommunications_asap_cartridges7.2cpe:2.3:a:oracle:communications_asap_cartridges:7.2:*:*:*:*:*:*:*
oraclecommunications_asap_cartridges7.3cpe:2.3:a:oracle:communications_asap_cartridges:7.3:*:*:*:*:*:*:*
oraclecommunications_design_studio7.3.4.3.0cpe:2.3:a:oracle:communications_design_studio:7.3.4.3.0:*:*:*:*:*:*:*
oraclecommunications_design_studio7.3.5.5.0cpe:2.3:a:oracle:communications_design_studio:7.3.5.5.0:*:*:*:*:*:*:*
Rows per page:
1-10 of 751

References

Related

redhatcve 1
openvas 8
nessus 9
symantec 1
osv 3
cve 1
ubuntucve 1
debian 1
gitlab 1
mageia 1
fedora 1
veracode 1
github 1
prion 1
cvelist 1
suse 1
debiancve 1
ibm 7
oracle 11
redhatcve
redhatcve
CVE-2018-8032
2018-08-02 21:18:45
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2018:3121-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:3119-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for axis (openSUSE-SU-2018:3218-1)
2018-10-18 00:00:00
nessus
nessus
openSUSE Security Update : axis (openSUSE-2019-792)
2019-03-27 00:00:00
Fedora 27 : axis (2018-8a85ed2f10)
2018-08-24 00:00:00
Debian DLA-2821-1 : axis - LTS security update
2021-11-18 00:00:00
symantec
symantec
Apache Axis CVE-2018-8032 Cross-Site Scripting Vulnerability
2018-08-02 00:00:00
osv
osv
Moderate severity vulnerability that affects apache axis
2018-10-16 20:51:15
CVE-2018-8032
2018-08-02 13:29:00
axis - security update
2021-11-17 00:00:00
cve
cve
CVE-2018-8032
2018-08-02 13:29:00
ubuntucve
ubuntucve
CVE-2018-8032
2018-08-02 00:00:00
debian
debian
[SECURITY] [DLA 2821-1] axis security update
2021-11-17 11:35:47
gitlab
gitlab
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
2018-10-16 00:00:00
mageia
mageia
Updated axis packages fix security vulnerability
2018-11-03 14:55:18
fedora
fedora
[SECURITY] Fedora 27 Update: axis-1.4-35.fc27
2018-08-23 09:46:20
veracode
veracode
Cross-Site Scripting (XSS)
2018-11-20 06:15:58
github
github
Moderate severity vulnerability that affects apache axis
2018-10-16 20:51:15
prion
prion
Cross site scripting
2018-08-02 13:29:00
cvelist
cvelist
CVE-2018-8032
2018-08-02 13:00:00
suse
suse
Security update for axis (moderate)
2018-10-18 00:13:19
debiancve
debiancve
CVE-2018-8032
2018-08-02 13:29:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities found in Axis.jar V1.x may affect IBM Content Collector for SAP Applications
2021-03-26 17:24:42
Security Bulletin: Multiple vulnerabilities in Apache Axis affect IBM Maximo Asset Management and the IBM Maximo Manage application in IBM Maximo Application Suite
2023-02-02 21:04:46
Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilties
2020-01-09 15:48:10
oracle
oracle
Oracle Critical Patch Update Advisory - October 2019
2020-01-22 00:00:00
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.004

Percentile

72.1%

JSON
Related for NVD:CVE-2018-8032
redhatcve1openvas8nessus9symantec1osv3cve1ubuntucve1debian1gitlab1mageia1fedora1veracode1github1prion1cvelist1suse1debiancve1ibm7oracle11