Apache Software Foundation Apache Axis2/Java vulnerabilities
8 published CVEs name Apache Software Foundation Apache Axis2/Java among the affected products.
- 8Published CVEs2 of them scored
- 8Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-120367
Apache Axis2/Java: unbounded JSON request body buffering
Apache Software Foundation · Apache Axis2/Java
High7.5 - CVE-2026-123779
Apache Axis2/Java: exposeServiceMetadata not enforced on all metadata routes
Apache Software Foundation · Apache Axis2/Java
Not scored - CVE-2026-123753
Apache Axis2/Java: SSRF via WS-Addressing ReplyTo and FaultTo endpoints
Apache Software Foundation · Apache Axis2/Java
Not scored - CVE-2026-123766
Apache Axis2/Java: Cross-site scripting in the OpenAPI module's Swagger UI page
Apache Software Foundation · Apache Axis2/Java
Not scored - CVE-2026-123770
Apache Axis2/Java: Unbounded multipart and form-encoded request bodies
Apache Software Foundation · Apache Axis2/Java
Not scored - CVE-2026-120761
Apache Axis2/Java: XML External Entity (XXE) injection via imported WSDL/XSD documents
Apache Software Foundation · Apache Axis2/Java
Not scored - CVE-2026-120832
Apache Axis2/Java: SSRF via WSDL/XSD schema import resolution
Apache Software Foundation · Apache Axis2/Java
Not scored - CVE-2026-66713
Apache Axis2/Java: deserialization of untrusted Data
Apache Software Foundation · Apache Axis2/Java
Critical9.8