Financial Services Compliance Regulatory Reporting

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-0227 Maven HIGH POC PATCH THREAT This Week

A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Rated high severity (CVSS 7.5), this vulnerability is no authentication required. Public exploit code available.

SSRF Apache Axis Agile Engineering Data Management Agile Product Lifecycle Management +34

NVD Exploit-DB

CVSS 3.1

7.5

EPSS

86.5%

CVE-2018-8032 Maven MEDIUM PATCH This Month

Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

XSS Apache Axis Agile Engineering Data Management Agile Product Lifecycle Management +35

NVD

CVSS 3.1

6.1

EPSS

10.6%

CVE-2019-0227 Maven

EPSS 87% CVSS 7.5

HIGH POC PATCH THREAT This Week

SSRF Apache Axis +36

NVD Exploit-DB

CVE-2018-8032 Maven

EPSS 11% CVSS 6.1

MEDIUM PATCH This Month

XSS Apache Axis +37

NVD