Lucene search
+L

2 matches found

OSV
OSV
added 2018/11/03 11:55 a.m.9 views

MGASA-2018-0431 Updated axis packages fix security vulnerability

Updated axis packages fix security vulnerability: Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting XSS attack in the default servlet/services CVE-2018-8032...

6.1CVSS6.1AI score0.10554EPSS
SaveExploits0References3
OSV
OSV
added 2014/12/26 5:4 p.m.4 views

MGASA-2014-0549 Updated axis packages fix CVE-2014-3596

Updated axis packages fixes security vulnerability: It was discovered that Axis incorrectly extracted the host name from an X.509 certificate subject's Common Name CN field. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate...

5.8CVSS6AI score0.09152EPSS
SaveExploits0References3
Rows per page
Query Builder