Soap (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2022-11-14. Vendor: Apache.

CVEs of Soap

• CVE-2022-45378 - CVSS 9.8 (critical), 2022-11-14: In the default configuration of Apache SOAP, an RPCRouterServlet is available without authentication. This gives an attacker the possibility to invoke methods…
• CVE-2022-40705 - CVSS 7.5 (high), 2022-09-22: An Improper Restriction of XML External Entity Reference vulnerability in RPCRouterServlet of Apache SOAP allows an attacker to read arbitrary files over…