CVE-2018-8032
Medium
Description
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.
SeverityMedium
CVSS6.1
Exploit probability—
Product
Apache Axis
PublishedAug 2, 2018
First seenAug 2, 2018
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache axis | 1.0 ≤ v ≤ 1.4 | — |
| oracle agile_engineering_data_management | 6.2.1.0 | — |
| oracle agile_product_lifecycle_management | 9.3.3 | — |
| oracle application_testing_suite | 13.2.0.1, 13.3.0.1 | — |
| oracle big_data_discovery | 1.6 | — |
| oracle communications_asap_cartridges | 7.2, 7.3 | — |
| oracle communications_design_studio | 7.3.4.3.0, 7.3.5.5.0, 7.4.0.4.0, 7.4.1.1.0 | — |
| oracle communications_element_manager | 8.0.0, 8.1.0, 8.1.1, 8.2.0 | — |
| oracle communications_network_integrity | 7.3.5, 7.3.6 | — |
| oracle communications_order_and_service_management | 7.3.0.0.0, 7.4 | — |
| oracle communications_session_report_manager | 8.0.0, 8.1.0, 8.1.1, 8.2.0 | — |
| oracle communications_session_route_manager | 8.0.0, 8.1.0, 8.1.1, 8.2.0 | — |
| oracle endeca_information_discovery_studio | 3.2.0 | — |
| oracle enterprise_manager_base_platform | 12.1.0.5, 13.3.0.0 | — |
| oracle enterprise_manager_for_fusion_middleware | 12.1.0.5 | — |
| oracle financial_services_analytical_applications_infrastructure | 7.3.3 ≤ v ≤ 7.3.5, 8.0.0 ≤ v ≤ 8.0.8 | — |
| oracle financial_services_compliance_regulatory_reporting | 8.0.6 ≤ v ≤ 8.0.8 | — |
| oracle financial_services_funds_transfer_pricing | 8.0.2 ≤ v ≤ 8.0.7 | — |
| oracle flexcube_core_banking | 11.7.0, 11.8.0, 11.9.0, 11.10.0 | — |
| oracle flexcube_private_banking | 12.0.0, 12.1.0 | — |
| oracle hospitality_guest_access | 4.2.0, 4.2.1 | — |
| oracle instantis_enterprisetrack | 17.1, 17.2, 17.3 | — |
| oracle internet_directory | 12.2.1.3.0, 12.2.1.4.0 | — |
| oracle knowledge | 8.6.0 ≤ v ≤ 8.6.3 | — |
| oracle peoplesoft_enterprise_human_capital_management_human_resources | 9.2 | — |
| oracle peoplesoft_enterprise_peopletools | 8.56, 8.57, 8.58 | — |
| oracle policy_automation_connector_for_siebel | 10.4.6 | — |
| oracle primavera_gateway | 16.2.11, 17.12.6 | — |
| oracle primavera_unifier | 17.7 ≤ v ≤ 17.12, 16.1, 16.2, 18.8, 19.12 | — |
| oracle rapid_planning | 12.1, 12.2 | — |
| oracle real-time_decision_server | 3.2.1.0 | — |
| oracle retail_order_broker | 15.0, 16.0, 18.0 | — |
| oracle retail_xstore_point_of_service | 7.1 | — |
| oracle secure_global_desktop | 5.4, 5.5 | — |
| oracle siebel_ui_framework | v ≤ 21.0 | — |
| oracle tuxedo | 12.1.1.0.0, 12.1.3 | — |
| oracle webcenter_portal | 12.2.1.3.0 | — |
| debian debian_linux | 9.0 | — |
| org.apache.axis:axisMaven | v ≤ 1.4 | — |
| axis:axisMaven | v ≤ 1.4 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.