Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Nov 2024, 04:13
Type | Values Removed | Values Added |
---|---|---|
References | () http://mail-archives.apache.org/mod_mbox/axis-java-dev/201807.mbox/%3CJIRA.13170716.1531060536000.93536.1531060560060%40Atlassian.JIRA%3E - | |
References | () https://issues.apache.org/jira/browse/AXIS-2924 - Issue Tracking, Patch, Vendor Advisory | |
References | () https://lists.apache.org/thread.html/3b89bc9e9d055db7eba8835ff6501f3f5db99d2a0928ec0be9b1d17b%40%3Cjava-dev.axis.apache.org%3E - | |
References | () https://lists.apache.org/thread.html/d06ed5e4eeb77d00e8d594ec01ee8ee1cba173a01ac4b18f1579d041%40%3Cjava-dev.axis.apache.org%3E - | |
References | () https://lists.debian.org/debian-lts-announce/2021/11/msg00015.html - Mailing List, Third Party Advisory | |
References | () https://security.netapp.com/advisory/ntap-20240621-0006/ - | |
References | () https://www.oracle.com/security-alerts/cpuApr2021.html - Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpuapr2020.html - Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpuapr2022.html - Patch, Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpujan2020.html - Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpujan2021.html - Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpujul2020.html - Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpujul2022.html - | |
References | () https://www.oracle.com/security-alerts/cpuoct2021.html - Third Party Advisory | |
References | () https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - Patch, Third Party Advisory |
21 Jun 2024, 19:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
25 Jul 2022, 18:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
13 Jun 2022, 19:01
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:oracle:internet_directory:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:internet_directory:12.2.1.4.0:*:*:*:*:*:*:* |
|
References | (MISC) https://www.oracle.com/security-alerts/cpuapr2022.html - Patch, Third Party Advisory |
20 Apr 2022, 00:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
30 Nov 2021, 21:59
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://www.oracle.com/security-alerts/cpuApr2021.html - Third Party Advisory | |
References | (MLIST) https://lists.debian.org/debian-lts-announce/2021/11/msg00015.html - Mailing List, Third Party Advisory | |
References | (MISC) https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - Patch, Third Party Advisory | |
References | (MISC) https://www.oracle.com/security-alerts/cpuoct2021.html - Third Party Advisory | |
CPE | cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:* cpe:2.3:a:oracle:flexcube_core_banking:11.8.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:flexcube_core_banking:11.7.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:flexcube_core_banking:11.9.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:flexcube_core_banking:11.10.0:*:*:*:*:*:*:* |
17 Nov 2021, 15:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
20 Oct 2021, 11:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
14 Jun 2021, 18:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2018-08-02 13:29
Updated : 2024-11-21 04:13
NVD link : CVE-2018-8032
Mitre link : CVE-2018-8032
CVE.ORG link : CVE-2018-8032
JSON object : View
Products Affected
oracle
- webcenter_portal
- enterprise_manager_for_fusion_middleware
- agile_engineering_data_management
- communications_session_report_manager
- communications_asap_cartridges
- flexcube_private_banking
- communications_session_route_manager
- application_testing_suite
- financial_services_compliance_regulatory_reporting
- hospitality_guest_access
- peoplesoft_enterprise_human_capital_management_human_resources
- endeca_information_discovery_studio
- primavera_unifier
- retail_xstore_point_of_service
- policy_automation_connector_for_siebel
- siebel_ui_framework
- peoplesoft_enterprise_peopletools
- tuxedo
- communications_order_and_service_management
- communications_design_studio
- primavera_gateway
- communications_network_integrity
- financial_services_funds_transfer_pricing
- enterprise_manager_base_platform
- big_data_discovery
- flexcube_core_banking
- rapid_planning
- agile_product_lifecycle_management_framework
- internet_directory
- secure_global_desktop
- financial_services_analytical_applications_infrastructure
- instantis_enterprisetrack
- knowledge
- communications_element_manager
- real-time_decision_server
- retail_order_broker
apache
- axis
debian
- debian_linux
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')