CVE-2012-5785
Published Nov 4, 2012Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certifica…
Vendor/product archive
apache / axis2 CVEs
Beta · best-effort6 CVEs tagged to apache / axis2 — 1 Critical, 1 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2012-5351
Published Oct 9, 2012Apache Axis2 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack," a differe…
CVE-2012-4418
Published Oct 9, 2012Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."
CVE-2010-0219
Published Oct 18, 2010Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, wh…
CVE-2010-1632
Published Jun 22, 2010Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server (WAS) 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, IBM Feature Pack for…
CVE-2010-2103
Published May 27, 2010Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions,…
Showing 1-6 of 6 CVEsPage 1 of 1