Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Jun 2024, 19:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
25 Jul 2022, 18:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
13 Jun 2022, 19:01
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:oracle:internet_directory:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:internet_directory:12.2.1.4.0:*:*:*:*:*:*:* |
|
References | (MISC) https://www.oracle.com/security-alerts/cpuapr2022.html - Patch, Third Party Advisory |
20 Apr 2022, 00:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
30 Nov 2021, 21:59
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://www.oracle.com/security-alerts/cpuApr2021.html - Third Party Advisory | |
References | (MLIST) https://lists.debian.org/debian-lts-announce/2021/11/msg00015.html - Mailing List, Third Party Advisory | |
References | (MISC) https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - Patch, Third Party Advisory | |
References | (MISC) https://www.oracle.com/security-alerts/cpuoct2021.html - Third Party Advisory | |
CPE | cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:* cpe:2.3:a:oracle:flexcube_core_banking:11.8.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:flexcube_core_banking:11.7.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:flexcube_core_banking:11.9.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:flexcube_core_banking:11.10.0:*:*:*:*:*:*:* |
17 Nov 2021, 15:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
20 Oct 2021, 11:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
14 Jun 2021, 18:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2018-08-02 13:29
Updated : 2024-06-21 19:15
NVD link : CVE-2018-8032
Mitre link : CVE-2018-8032
CVE.ORG link : CVE-2018-8032
JSON object : View
Products Affected
oracle
- communications_session_report_manager
- big_data_discovery
- primavera_unifier
- secure_global_desktop
- webcenter_portal
- knowledge
- siebel_ui_framework
- peoplesoft_enterprise_human_capital_management_human_resources
- financial_services_funds_transfer_pricing
- communications_session_route_manager
- retail_order_broker
- flexcube_core_banking
- hospitality_guest_access
- retail_xstore_point_of_service
- tuxedo
- flexcube_private_banking
- communications_order_and_service_management
- rapid_planning
- enterprise_manager_base_platform
- communications_network_integrity
- application_testing_suite
- enterprise_manager_for_fusion_middleware
- financial_services_analytical_applications_infrastructure
- primavera_gateway
- endeca_information_discovery_studio
- policy_automation_connector_for_siebel
- agile_product_lifecycle_management_framework
- financial_services_compliance_regulatory_reporting
- instantis_enterprisetrack
- real-time_decision_server
- communications_element_manager
- communications_asap_cartridges
- communications_design_studio
- peoplesoft_enterprise_peopletools
- agile_engineering_data_management
- internet_directory
debian
- debian_linux
apache
- axis
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')