Internet Directory

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-0227 Maven HIGH POC PATCH THREAT This Week

A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Rated high severity (CVSS 7.5), this vulnerability is no authentication required. Public exploit code available.

SSRF Apache Axis Agile Engineering Data Management Agile Product Lifecycle Management +34

NVD Exploit-DB

CVSS 3.1

7.5

EPSS

86.5%

CVE-2018-8032 Maven MEDIUM PATCH This Month

Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

XSS Apache Axis Agile Engineering Data Management Agile Product Lifecycle Management +35

NVD

CVSS 3.1

6.1

EPSS

10.6%

CVE-2018-2601 HIGH PATCH This Week

Vulnerability in the Oracle Internet Directory component of Oracle Fusion Middleware (subcomponent: Oracle Directory Services Manager). Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable.

Oracle Information Disclosure Internet Directory

NVD

CVSS 3.0

8.0

EPSS

1.7%

CVE-2019-0227 Maven

EPSS 87% CVSS 7.5

HIGH POC PATCH THREAT This Week

SSRF Apache Axis +36

NVD Exploit-DB

CVE-2018-8032 Maven

EPSS 11% CVSS 6.1

MEDIUM PATCH This Month

XSS Apache Axis +37

NVD

CVE-2018-2601

EPSS 2% CVSS 8.0

HIGH PATCH This Week

Oracle Information Disclosure Internet Directory

NVD