CVE-2018-8032

🗓️ 02 Aug 2018 13:29:00Reported by ubuntu.comType

ubuntucve

ubuntucve🔗 ubuntu.com👁 29 Views

Apache Axis 1.x XSS vulnerability

Reporter	Title	Published	Views	Family All 66
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Axis affect IBM Maximo Asset Management and the IBM Maximo Manage application in IBM Maximo Application Suite	2 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities found in Axis.jar V1.x may affect IBM Content Collector for SAP Applications	26 Mar 202117:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect the IBM App Connect Enterprise Toolkit and the IBM Integration Bus Toolkit	30 Jun 202309:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Axis	28 Mar 202517:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilties	9 Jan 202015:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in Apache Axis, CKEditor4 & IBM MQ (CVE-2014-3596, CVE-2018-8032, CVE-2019-0227, CVE-2012-5784, CVE-2021-38986, CVE-2022-22321, CVE-2023-28439)	19 Mar 202515:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM System Storage Support for Microsoft Volume Shadow Copy Service and Virtual Disk Service is vulnerable to multiple vulnerabilities due to Apache Axis. CVE-2018-8032, CVE-2014-3596, CVE-2019-0227, CVE-2012-5784	13 Oct 202510:29	–	ibm
BDU FSTEC	The vulnerability of the Apache Axis web service platform, which exists due to the lack of measures taken to protect the structure of the web page, allows attackers to carry out XSS attacks.	3 Dec 201900:00	–	bdu_fstec
CNVD	Apache Axis Cross-Site Scripting Vulnerability	3 Aug 201800:00	–	cnvd

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	18.04	any	axis	0	axis_0_any.deb

Source	Link
issues	www.issues.apache.org/jira/browse/AXIS-2924
svn	www.svn.apache.org/r1831943
mail-archives	www.mail-archives.apache.org/mod_mbox/axis-java-dev/201807.mbox/%[email protected]%3E
cve	www.cve.org/CVERecord

26 Aug 2025 12:10Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.3

CVSS 3.16.1

EPSS0.01707

cve-2018-8032 apache axis 1.x cross-site scripting default servlet services debian bug