CVE-2023-51441 Apache Axis 1.x (EOL) may allow SSRF when untrusted input is passed to the service admin HTTP API

🗓️ 06 Jan 2024 11:59:37Reported by GoogleType

osv

osv🔗 osv.dev👁 24 Views

Improper Input Validation vulnerability in Apache Axis allows SSR

Reporter	Title	Published	Views	Family All 35
IBM Security Bulletins	Security Bulletin: Apache Axis1 CVE-2023-51441 security vulnerability in FileNet Content Manager, Process Engine Process Orchestration	9 Jul 202515:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Application Dependency Discovery Manager is vulnerable to server-side request forgery attack.	10 Jun 202512:35	–	ibm
IBM Security Bulletins	Security Bulletin: Apache axis.jar is present in older Statistics releases that use IBM SPSS C&DS	25 Mar 202515:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM B2B Sterling Integrator is affected by Apache Axis vulnerability to server-side request forgery	14 Nov 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM System Storage Support for Microsoft Volume Shadow Copy Service and Virtual Disk Service is vulnerable to an improper input validation vulnerability due to Apache Axis. CVE-2023-51441.	27 Oct 202516:14	–	ibm
Circl	CVE-2023-51441	6 Jan 202413:21	–	circl
CNNVD	Apache Axis 代码问题漏洞	6 Jan 202400:00	–	cnnvd
CNVD	Apache Axis Code Issue Vulnerability	11 Jan 202400:00	–	cnvd
CVE	CVE-2023-51441	6 Jan 202411:59	–	cve
Cvelist	CVE-2023-51441 Apache Axis 1.x (EOL) may allow SSRF when untrusted input is passed to the service admin HTTP API	6 Jan 202411:59	–	cvelist

Source	Link
repo	www.repo.maven.apache.org/maven2
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/51xxx/CVE-2023-51441.json
lists	www.lists.apache.org/thread/8nrm5thop8f82pglx4o0jg8wmvy6d9yd
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-51441
github	www.github.com/apache/axis-axis1-java/commit/685c309febc64aa393b2d64a05f90e7eb9f73e06

22 Jul 2026 02:50Current

7High risk

Vulners AI Score7

CVSS 3.17.2

EPSS0.01213

cve-2023-51441 apache axis input validation ssrf eol java patch github vulnerability software