Oracle Communications Asap Cartridges vulnerabilities

2 vulnerabilities

Known vulnerabilities in Oracle Communications Asap Cartridges, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2018-8032apache software foundationapache axis+48
EPSS score
10.55%
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.7.5CVE-2019-0227apacheapache axis 1.4+41
EPSS score
91.94%
A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.