CVE-2018-8032
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.
- Score
- CVSS 3.1 6.1 Medium
- Status
- Modified - security@apache.org
- Published
- 2018-08-02
- Last modified
- 2024-09-16
- Weaknesses
- CWE-79
Affected products
- Axis (Apache)
- Apache Axis (Apache Software Foundation)
- Debian Linux (Debian)
- Agile Engineering Data Management (Oracle)
- Agile Product Lifecycle Management (Oracle)
- Application Testing Suite (Oracle)
- Big Data Discovery (Oracle)
- Communications Asap Cartridges (Oracle)
- Communications Design Studio (Oracle)
- Communications Element Manager (Oracle)
- Communications Network Integrity (Oracle)
- Communications Order And Service Management (Oracle)
- Communications Session Report Manager (Oracle)
- Communications Session Route Manager (Oracle)
- Endeca Information Discovery Studio (Oracle)
- Enterprise Manager Base Platform (Oracle)
- Enterprise Manager For Fusion Middleware (Oracle)
- Financial Services Analytical Applications Infrastructure (Oracle)
- Financial Services Compliance Regulatory Reporting (Oracle)
- Financial Services Funds Transfer Pricing (Oracle)
- Flexcube Core Banking (Oracle)
- Flexcube Private Banking (Oracle)
- Hospitality Guest Access (Oracle)
- Instantis Enterprisetrack (Oracle)
- Internet Directory (Oracle)
- Knowledge (Oracle)
- Peoplesoft Enterprise Human Capital Management Human Resources (Oracle)
- Peoplesoft Enterprise Peopletools (Oracle)
- Policy Automation Connector For Siebel (Oracle)
- Primavera Gateway (Oracle)
- Primavera Unifier (Oracle)
- Rapid Planning (Oracle)
- Real-time Decision Server (Oracle)
- Retail Order Broker (Oracle)
- Retail Xstore Point Of Service (Oracle)
- Secure Global Desktop (Oracle)
- Siebel Ui Framework (Oracle)
- Tuxedo (Oracle)
- Webcenter Portal (Oracle)
References
- http://mail-archives.apache.org/mod_mbox/axis-java-dev/201807.mbox/%3CJIRA.13170716.1531060536000.93536.1531060560060%4…
- https://issues.apache.org/jira/browse/AXIS-2924
- https://lists.apache.org/thread.html/3b89bc9e9d055db7eba8835ff6501f3f5db99d2a0928ec0be9b1d17b%40%3Cjava-dev.axis.apache…
- https://lists.apache.org/thread.html/d06ed5e4eeb77d00e8d594ec01ee8ee1cba173a01ac4b18f1579d041%40%3Cjava-dev.axis.apache…
- https://lists.debian.org/debian-lts-announce/2021/11/msg00015.html
- https://security.netapp.com/advisory/ntap-20240621-0006/
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
