CVE-2019-0227
45Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendepss 92%
de la publicación al arma0 días
Publicada en NVD1 may
1ª PoC9 abr
probabilidad de explotación
92%top 1% de las CVE
explotación observada
noninguna fuente lo reporta
3 exploit(s) público(s)
A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.
Productos afectados
Apache · Apache Axis 1.4PoCs públicas encontradas — 3
exploitdbwww.exploit-db.com/exploits/46682no verificadogithubgithub.com/ianxtianxt/cve-2019-0227★ 4githubgithub.com/1475210817/Axis1.4-CVE-2019-0227★ 0⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://lists.apache.org/thread.html/r3a5baf5d76f1f2181be7f54da3deab70d7a38b5660b387583d05a8cd%40%3Cjava-user.axis.apache.org%3Ehttps://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3Ehttps://rhinosecuritylabs.com/application-security/cve-2019-0227-expired-domain-rce-apache-axis/https://security.netapp.com/advisory/ntap-20240621-0006/https://www.oracle.com/security-alerts/cpuapr2020.htmlhttps://www.oracle.com/security-alerts/cpuApr2021.htmlhttps://www.oracle.com/security-alerts/cpuapr2022.htmlhttps://www.oracle.com/security-alerts/cpujan2020.htmlhttps://www.oracle.com/security-alerts/cpujan2021.htmlhttps://www.oracle.com/security-alerts/cpujul2020.htmlhttps://www.oracle.com/security-alerts/cpujul2022.htmlhttps://www.oracle.com/security-alerts/cpuoct2021.html