Lucene search
K

6 matches found

Debian CVE
Debian CVE
added 2024/01/06 11:59 a.m.43 views

CVE-2023-51441

UNSUPPORTED WHEN ASSIGNED Improper Input Validation vulnerability in Apache Axis allowed users with access to the admin service to perform possible SSRF This issue affects Apache Axis: through 1.3. As Axis 1 has been EOL we recommend you migrate to a different SOAP engine, such as Apache Axis...

7.2CVSS7AI score0.00075EPSS
Exploits0
OSV
OSV
added 2023/09/05 3:15 p.m.27 views

CVE-2023-40743

UNSUPPORTED WHEN ASSIGNED When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through "ServiceFactory.getService" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted input to this API method, this could expose...

9.8CVSS9.4AI score
Exploits0References3
UbuntuCve
UbuntuCve
added 2023/09/05 3:15 p.m.37 views

CVE-2023-40743

UNSUPPORTED WHEN ASSIGNED When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through "ServiceFactory.getService" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted input to this API method, this could expose...

9.8CVSS7AI score0.00707EPSS
Exploits0References5
Prion
Prion
added 2023/09/05 3:15 p.m.33 views

Design/Logic Flaw

UNSUPPPORTED WHEN ASSIGNED UNSUPPORTED WHEN ASSIGNED When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through "ServiceFactory.getService" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted input to this API...

7.5CVSS9.4AI score0.00707EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/09/05 2:42 p.m.29 views

CVE-2023-40743 Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService

UNSUPPORTED WHEN ASSIGNED When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through "ServiceFactory.getService" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted input to this API method, this could expose...

9.6AI score0.00707EPSS
Exploits0References3
GitLab Advisory Database
GitLab Advisory Database
added 2023/09/05 12:0 a.m.14 views

Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService

When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through "ServiceFactory.getService" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted input to this API method, this could expose the application to DoS, SS...

9.8CVSS7.2AI score0.00707EPSS
Exploits0References6
Rows per page
Query Builder