1942 matches found
Security Bulletin: Apache Axis as used in IBM QRadar SIEM is vulnerable to a possible man in the middle attack. (CVE-2012-5784)
Summary IBM QRadar / QRM / QVM / QRIF / QNI includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID: CVE-2012-5784 Description: Apache Axis 1.4, as used in multiple products, could allow a remote attacker to...
AXIS Camera Unsecured Feed Detection
The remote host seems to be an Axis Network Camera. It was possible to access the camera feed remotely without supplying credentials. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid122369; scriptversion"1.5"; scriptcvsdate"Date: 2020/01/22"; scriptnameenglish:"AXIS...
Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities
Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to multiple security vulnerabilities. There are multiple vulnerabilities fixes to open source libraries distributed with IGI, other less secure algorithms for crypto, xss attacks and click...
Man In The Middle (MitM) Attacks Are Possible With Spoofed SSL Servers
The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subjec...
Man In The Middle (MitM) Attacks Are Possible With Spoofed SSL Servers
Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or...
PT-2019-3928
Name of the Vulnerable Software and Affected Versions Apache Axis version 1.4 Description The issue is related to insufficient validation of incoming requests, which can allow a remote attacker to perform a Server Side Request Forgery SSRF attack. The vulnerability affects the Apache Axis 1.4...
Cross-Site Scripting (XSS)
axis is vulnerable to a cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary Javascript through the default servlet/services URL...
MGASA-2018-0431 Updated axis packages fix security vulnerability
Updated axis packages fix security vulnerability: Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting XSS attack in the default servlet/services CVE-2018-8032...
Updated axis packages fix security vulnerability
Updated axis packages fix security vulnerability: Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting XSS attack in the default servlet/services CVE-2018-8032...
Security update for axis (moderate)
This update for axis fixes the following security issue: - CVE-2018-8032: Prevent cross-site scripting XSS attack in the default servlet/services bsc1103658. This update was imported from the SUSE:SLE-12:Update update project...
openSUSE: Security Advisory for axis (openSUSE-SU-2018:3218-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : axis (openSUSE-2018-1188)
This update for axis fixes the following security issue : - CVE-2018-8032: Prevent cross-site scripting XSS attack in the default servlet/services bsc1103658. This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
Moderate severity vulnerability that affects apache axis
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting XSS attack in the default servlet/services...
GHSA-96JQ-75WH-2658 Moderate severity vulnerability that affects apache axis
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting XSS attack in the default servlet/services...
GHSA-R53V-VM87-F72C Improper Validation of Certificates in apache axis
The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subjec...
Improper Validation of Certificates in apache axis
The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subjec...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting XSS attack in the default servlet/services...
SUSE-SU-2018:3119-1 Security update for axis
This update for axis fixes the following security issue: - CVE-2018-8032: Prevent cross-site scripting XSS attack in the default servlet/services bsc1103658...