Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/axis/axis@1.4
purl pkg:maven/axis/axis@1.4
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 10.0
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-rmqp-9w4c-gc7w
Aliases:
CVE-2023-40743
Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService When integrating Apache Axis 1.x in … There are no reported fixed by versions.
GHSA-55w9-c3g2-4rrh
Aliases:
CVE-2012-5784
Man-in-the-middle attack in Apache Axis Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal … There are no reported fixed by versions.
GHSA-96jq-75wh-2658
Aliases:
CVE-2018-8032
Moderate severity vulnerability that affects apache axis Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site … There are no reported fixed by versions.
GHSA-r53v-vm87-f72c
Aliases:
CVE-2014-3596
Improper Validation of Certificates in apache axis The getCN function in Apache Axis 1.4 and earlier does not properly verify … There are no reported fixed by versions.
GHSA-h9gj-rqrw-x4fq
Aliases:
CVE-2019-0227
Server Side Request Forgery in Apache Axis A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution … There are no reported fixed by versions.
This package is not known to fix any advisories.