Fluid Attacks Database

Description

Moderate severity vulnerability that affects apache axis Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
maven	axis:axis	>=0 <=1.4	-
maven	org.apache.axis:axis	>=0 <=1.4	-
debian 13	axis	>=0 <1.4-28	1.4-28
debian 14	axis	>=0 <1.4-28	1.4-28
debian 12	axis	>=0 <1.4-28	1.4-28
rpm rhel5	axis	-	-
rpm rhel6	axis	-	-

Aliases

1. CVE-2018-80322. NVD-2018-80323. OSV-2018-80324. OSV-DEBIAN-2018-80325. GHSA-96jq-75wh-26586. GCVE-2018-80327. lists.debian.org8. SECURITY-TRACKER-CVE-2018-8032

References

1. https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html2. https://www.oracle.com/security-alerts/cpuoct2021.html3. https://www.oracle.com/security-alerts/cpujul2022.html4. https://www.oracle.com/security-alerts/cpujul2020.html5. https://www.oracle.com/security-alerts/cpujan2021.html6. https://www.oracle.com/security-alerts/cpujan2020.html7. https://www.oracle.com/security-alerts/cpuapr2022.html8. https://www.oracle.com/security-alerts/cpuapr2020.html9. https://www.oracle.com/security-alerts/cpuApr2021.html10. https://security.netapp.com/advisory/ntap-20240621-000611. https://lists.apache.org/thread.html/d06ed5e4eeb77d00e8d594ec01ee8ee1cba173a01ac4b18f1579d041@%3Cjava-dev.axis.apache.org%3E12. https://lists.apache.org/thread.html/d06ed5e4eeb77d00e8d594ec01ee8ee1cba173a01ac4b18f1579d041%40%3Cjava-dev.axis.apache.org%3E13. https://lists.apache.org/thread.html/3b89bc9e9d055db7eba8835ff6501f3f5db99d2a0928ec0be9b1d17b@%3Cjava-dev.axis.apache.org%3E14. https://lists.apache.org/thread.html/3b89bc9e9d055db7eba8835ff6501f3f5db99d2a0928ec0be9b1d17b%40%3Cjava-dev.axis.apache.org%3E15. https://issues.apache.org/jira/browse/AXIS-292416. http://mail-archives.apache.org/mod_mbox/axis-java-dev/201807.mbox/%3CJIRA.13170716.1531060536000.93536.1531060560060%40Atlassian.JIRA%3E17. http://mail-archives.apache.org/mod_mbox/axis-java-dev/201807.mbox/%3CJIRA.13170716.1531060536000.93536.1531060560060@Atlassian.JIRA%3E18. https://github.com/cairuojin/CVE-2018-8032

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.