Skip to content

CVE-2018-8032 Moderate severity vulnerability that affects apache axis

MediumCVSS 6.1 EPSS 10.6%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.

Affected products

ProductAffected versionsFixed in
org.apache.axis/axis(Maven) <= 1.4 No fix listed
org.apache.axis/axis(Maven) = 1.4 No fix listed
axis/axis(Maven) <= 1.4 No fix listed
axis/axis(Maven) = 1.0 No fix listed
axis/axis(Maven) = 1.1 No fix listed
axis/axis(Maven) = 1.1-beta No fix listed
axis/axis(Maven) = 1.2 No fix listed
axis/axis(Maven) = 1.2-RC1 No fix listed
axis/axis(Maven) = 1.2-RC2 No fix listed
axis/axis(Maven) = 1.2-RC3 No fix listed
axis/axis(Maven) = 1.2-alpha-1 No fix listed
axis/axis(Maven) = 1.2-beta-2 No fix listed
axis/axis(Maven) = 1.2-beta-3 No fix listed
axis/axis(Maven) = 1.2.1 No fix listed
axis/axis(Maven) = 1.3 No fix listed
axis/axis(Maven) = 1.4 No fix listed
debian/axis(Debian:12) < 1.4-28 1.4-28
debian/axis(Debian:13) < 1.4-28 1.4-28
debian/axis(Debian:14) < 1.4-28 1.4-28
apache axis >= 1.0, <= 1.4 No fix listed
oracle agile engineering data management = 6.2.1.0 No fix listed
oracle agile product lifecycle management = 9.3.3 No fix listed
oracle application testing suite = 13.2.0.1 No fix listed
oracle application testing suite = 13.3.0.1 No fix listed
oracle big data discovery = 1.6 No fix listed
Show 71 more
ProductAffected versionsFixed in
oracle communications asap cartridges = 7.2 No fix listed
oracle communications asap cartridges = 7.3 No fix listed
oracle communications design studio = 7.3.4.3.0 No fix listed
oracle communications design studio = 7.3.5.5.0 No fix listed
oracle communications design studio = 7.4.0.4.0 No fix listed
oracle communications design studio = 7.4.1.1.0 No fix listed
oracle communications element manager = 8.0.0 No fix listed
oracle communications element manager = 8.1.0 No fix listed
oracle communications element manager = 8.1.1 No fix listed
oracle communications element manager = 8.2.0 No fix listed
oracle communications network integrity = 7.3.5 No fix listed
oracle communications network integrity = 7.3.6 No fix listed
oracle communications order and service management = 7.3.0.0.0 No fix listed
oracle communications order and service management = 7.4 No fix listed
oracle communications session report manager = 8.0.0 No fix listed
oracle communications session report manager = 8.1.0 No fix listed
oracle communications session report manager = 8.1.1 No fix listed
oracle communications session report manager = 8.2.0 No fix listed
oracle communications session route manager = 8.0.0 No fix listed
oracle communications session route manager = 8.1.0 No fix listed
oracle communications session route manager = 8.1.1 No fix listed
oracle communications session route manager = 8.2.0 No fix listed
oracle endeca information discovery studio = 3.2.0 No fix listed
oracle enterprise manager base platform = 12.1.0.5 No fix listed
oracle enterprise manager base platform = 13.3.0.0 No fix listed
oracle enterprise manager for fusion middleware = 12.1.0.5 No fix listed
oracle financial services analytical applications infrastructure >= 7.3.3, <= 7.3.5 No fix listed
oracle financial services analytical applications infrastructure >= 8.0.0, <= 8.0.8 No fix listed
oracle financial services compliance regulatory reporting >= 8.0.6, <= 8.0.8 No fix listed
oracle financial services funds transfer pricing >= 8.0.2, <= 8.0.7 No fix listed
oracle flexcube core banking = 11.7.0 No fix listed
oracle flexcube core banking = 11.8.0 No fix listed
oracle flexcube core banking = 11.9.0 No fix listed
oracle flexcube core banking = 11.10.0 No fix listed
oracle flexcube private banking = 12.0.0 No fix listed
oracle flexcube private banking = 12.1.0 No fix listed
oracle hospitality guest access = 4.2.0 No fix listed
oracle hospitality guest access = 4.2.1 No fix listed
oracle instantis enterprisetrack = 17.1 No fix listed
oracle instantis enterprisetrack = 17.2 No fix listed
oracle instantis enterprisetrack = 17.3 No fix listed
oracle internet directory = 12.2.1.3.0 No fix listed
oracle internet directory = 12.2.1.4.0 No fix listed
oracle knowledge >= 8.6.0, <= 8.6.3 No fix listed
oracle peoplesoft enterprise human capital management human resources = 9.2 No fix listed
oracle PeopleSoft Enterprise PeopleTools = 8.56 No fix listed
oracle PeopleSoft Enterprise PeopleTools = 8.57 No fix listed
oracle PeopleSoft Enterprise PeopleTools = 8.58 No fix listed
oracle policy automation connector for siebel = 10.4.6 No fix listed
oracle primavera gateway = 16.2.11 No fix listed
oracle primavera gateway = 17.12.6 No fix listed
oracle primavera unifier >= 17.7, <= 17.12 No fix listed
oracle primavera unifier = 16.1 No fix listed
oracle primavera unifier = 16.2 No fix listed
oracle primavera unifier = 18.8 No fix listed
oracle primavera unifier = 19.12 No fix listed
oracle rapid planning = 12.1 No fix listed
oracle rapid planning = 12.2 No fix listed
oracle real-time decision server = 3.2.1.0 No fix listed
oracle retail order broker = 15.0 No fix listed
oracle retail order broker = 16.0 No fix listed
oracle retail order broker = 18.0 No fix listed
oracle retail xstore point of service = 7.1 No fix listed
oracle secure global desktop = 5.4 No fix listed
oracle secure global desktop = 5.5 No fix listed
oracle siebel ui framework <= 21.0 No fix listed
oracle tuxedo = 12.1.1.0.0 No fix listed
oracle tuxedo = 12.1.3 No fix listed
oracle webcenter portal = 12.2.1.3.0 No fix listed
debian linux = 9.0 No fix listed
Apache Axis = 1.x up to and including 1.4 No fix listed

References