Lucene search
K

6 matches found

vulnersOsv
vulnersOsv
added 2022/05/13 1:1 a.m.2 views

com.google.api-ads:common-axis2 (=0.1.0), com.google.code.magja:magja (>=0.0.1 <=0.0.3) +16 more potentially affected by CVE-2012-5351 via org.apache.axis2:axis2 (>=1.2 <=1.6.3)

org.apache.axis2:axis2 MAVEN version =1.2, =0.0.1, =2.8.28, =0.13.0, =0.13.0, =3.3, =3.3, =0.9, =0.11 and more Source cves: CVE-2012-5351 Source advisory: OSV:GHSA-66RX-GQX3-P98M...

6.4CVSS5.8AI score0.05089EPSS
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2019/10/23 7:41 p.m.21 views

Security Bulletin: IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise Edition is affected by ASoC vulnerability (CVE-2012-5351)

Summary IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise has addressed the ASoC vulnerability. Vulnerability Details CVEID: CVE-2012-5351 DESCRIPTION: Apache Axis2 could allow a remote attacker to bypass security restrictions. An attacker could exploit this vulnerability using a SAML...

6.4CVSS0.8AI score0.05089EPSS
Exploits0Affected Software1
OpenVAS
OpenVAS
added 2015/03/17 12:0 a.m.332 views

Apache Axis2 <= 1.6.2 Multiple Vulnerabilities

Apache Axis2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE = "cpe:/a:apache:axis2"; if...

6.4CVSS8.6AI score0.05999EPSS
Exploits2References3
NVD
NVD
added 2012/10/09 11:55 p.m.23 views

CVE-2012-5351

Apache Axis2 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack," a different vulnerability than CVE-2012-4418...

6.4CVSS9.4AI score0.05089EPSS
Exploits0References3
Cvelist
Cvelist
added 2012/10/09 11:0 p.m.29 views

CVE-2012-5351

Apache Axis2 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack," a different vulnerability than CVE-2012-4418...

9.4AI score0.05089EPSS
Exploits0References3
CVE
CVE
added 2012/10/09 11:0 p.m.115 views

CVE-2012-5351

CVE-2012-5351 affects Apache Axis2 and allows remote attackers to bypass authentication by forging a SAML assertion that lacks a Signature element (Signature exclusion attack). This is the same family as CVE-2012-4418 and enables message forgery without proper XML-signature verification. IBM-rela...

6.4CVSS6.8AI score0.05089EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder