Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/axis/axis@1.2-RC1
purl pkg:maven/axis/axis@1.2-RC1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 10.0
Vulnerabilities affecting this package (6)
Advisory Summary Fixed in package version
GHSA-hr2c-p8rh-238h
Aliases:
CVE-2023-51441
Apache Axis Improper Input Validation vulnerability ** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users … There are no reported fixed by versions.
GHSA-rmqp-9w4c-gc7w
Aliases:
CVE-2023-40743
Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService When integrating Apache Axis 1.x in … There are no reported fixed by versions.
GHSA-55w9-c3g2-4rrh
Aliases:
CVE-2012-5784
Man-in-the-middle attack in Apache Axis Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal … There are no reported fixed by versions.
GHSA-96jq-75wh-2658
Aliases:
CVE-2018-8032
Moderate severity vulnerability that affects apache axis Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site … There are no reported fixed by versions.
GHSA-r53v-vm87-f72c
Aliases:
CVE-2014-3596
Improper Validation of Certificates in apache axis The getCN function in Apache Axis 1.4 and earlier does not properly verify … There are no reported fixed by versions.
GHSA-h9gj-rqrw-x4fq
Aliases:
CVE-2019-0227
Server Side Request Forgery in Apache Axis A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution … There are no reported fixed by versions.
This package is not known to fix any advisories.