CVE-2026-120832

Apache Axis2/Java versions through 2.0.1 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. The issue occurs when the application builds a service description from a WSDL using ServiceClient , AxisService.createClientSideAxisService , or WSDLToAxisServiceBuilder . Because the s...

EUVD-2026-119929

Server-Side Request Forgery SSRF vulnerability in Apache Axis2/Java. When Axis2 built a service description from a WSDL, through ServiceClient, AxisService.createClientSideAxisService or WSDLToAxisServiceBuilder, it fetched the absolute URLs in wsdl:import locations and in xsd:import and...