ZeroHour

CVE-2018-8032

CVSS 3.1
6.1 medium
EPSS
11%p95
Published
()
Modified
Description

Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.

Vendors
apacheoracledebian
Products
axis, agile engineering data management, agile product lifecycle management, application testing suite, big data discovery, communications asap cartridges, communications design studio, communications element manager, communications network integrity, communications order and service management, communications session report manager, communications session route manager
Weakness
CWE-79
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

In the news

No ingested article mentions this CVE yet.