ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-0227

PoC —
CVSS 3.1
7.5 high
EPSS
92%p100
Published
()
Modified
Description

A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.

Vendors
apacheoracle
Products
axis, agile engineering data management, agile product lifecycle management, application testing suite, big data discovery, communications asap cartridges, communications design studio, communications element manager, communications network integrity, communications order and service management, communications session report manager, communications session route manager
Weakness
CWE-918
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (91.9%)

In the news

No ingested article mentions this CVE yet.