Lucene search
+L

6 matches found

vulnersOsv
vulnersOsv
•added 2022/05/13 1:01 a.m.•5 views

com.google.api-ads:common-axis2 (0.1.0), com.google.code.magja:magja (>=0.0.1, <=0.0.3) +16 more potentially affected by CVE-2012-5351 via org.apache.axis2:axis2 (>=1.2, <=1.6.3)

org.apache.axis2:axis2 MAVEN version =1.2, =0.0.1, =2.8.28, =0.13.0, =0.13.0, =3.3, =3.3, =0.9, =0.11 and more Source cves: CVE-2012-5351 Source advisory: OSV:GHSA-66RX-GQX3-P98M...

6.4CVSS0.05089EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2019/10/23 7:41 p.m.•32 views

Security Bulletin: IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise Edition is affected by ASoC vulnerability (CVE-2012-5351)

Summary IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise has addressed the ASoC vulnerability. Vulnerability Details CVEID: CVE-2012-5351 DESCRIPTION: Apache Axis2 could allow a remote attacker to bypass security restrictions. An attacker could exploit this vulnerability using a SAML...

6.4CVSS0.8AI score0.05089EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
•added 2015/03/17 12:00 a.m.•388 views

Apache Axis2 <= 1.6.2 Multiple Vulnerabilities

Apache Axis2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE = "cpe:/a:apache:axis2"; if...

6.4CVSS8.6AI score0.05999EPSS
SaveExploits2References3
NVD
NVD
•added 2012/10/09 11:55 p.m.•41 views

CVE-2012-5351

Apache Axis2 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack," a different vulnerability than CVE-2012-4418...

6.4CVSS9.4AI score0.05089EPSS
SaveExploits0References3
CVE
CVE
•added 2012/10/09 11:00 p.m.•146 views

CVE-2012-5351

CVE-2012-5351 affects Apache Axis2 and allows remote attackers to bypass authentication by forging a SAML assertion that lacks a Signature element (Signature exclusion attack). This is the same family as CVE-2012-4418 and enables message forgery without proper XML-signature verification. IBM-rela...

6.4CVSS6.8AI score0.05089EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2012/10/09 11:00 p.m.•51 views

CVE-2012-5351

Apache Axis2 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack," a different vulnerability than CVE-2012-4418...

9.4AI score0.05089EPSS
SaveExploits0References3
Rows per page
Query Builder