Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/axis@1.4-16.1?distro=trixie
purl pkg:deb/debian/axis@1.4-16.1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-hj44-args-tfa4 Man-in-the-middle attack in Apache Axis Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. CVE-2012-5784
GHSA-55w9-c3g2-4rrh

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-02T01:18:45.173021+00:00 Debian Importer Fixing VCID-hj44-args-tfa4 https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-04-16T12:26:34.324745+00:00 Debian Importer Fixing VCID-hj44-args-tfa4 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:31:00.989859+00:00 Debian Importer Fixing VCID-hj44-args-tfa4 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-02T17:15:03.520184+00:00 Debian Importer Fixing VCID-hj44-args-tfa4 https://security-tracker.debian.org/tracker/data/json 38.1.0