GCVE - cpe:2.3:a:apache:axis2:1.5.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:axis2:1.5.1:*:*:*:*:*:*:*

part: a version: 1.5.1 update: *

Vendor	Apache (`b0303047-b7dd-5cf8-abcc-71b7d9d80b95`)
Product	Axis2 (`8e522fa9-af7c-5272-98f9-99a4f055958e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:apache/axis`	purl2cpe	2026-06-01 10:14:29.626279
`pkg:deb/debian/axis`	purl2cpe	2026-06-01 10:14:29.626280
`pkg:deb/ubuntu/axis`	purl2cpe	2026-06-01 10:14:29.626282
`pkg:github/apache/axis-site`	purl2cpe	2026-06-01 10:14:29.626283
`pkg:maven/org.apache.axis2/axis2`	purl2cpe	2026-06-01 10:14:29.626284

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-5785`	vulnerable	2026-06-08 05:02:58.240117	Details available Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Published: 2012-11-04T22:00:00.000Z Updated: 2024-08-06T21:14:16.347Z Open on db.gcve.eu Reference links http://secunia.com/advisories/51219 https://exchange.xforce.ibmcloud.com/vulnerabilities/79830 http://www.securityfocus.com/bid/56408 http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2103`	vulnerable	2026-06-08 04:54:11.672452	Details available Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP Business Objects 12, 3com IMC, and possibly other products, allows remote attackers to inject arbitrary web script or HTML via the modules parameter. NOTE: some of these details are obtained from third party information. Published: 2010-05-27T22:00:00.000Z Updated: 2024-08-07T02:25:05.890Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/58790 http://secunia.com/advisories/39906 http://www.exploit-db.com/exploits/12689 https://kb.juniper.net/KB27373 http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-03	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0219`	vulnerable	2026-06-08 04:51:53.589611	Details available Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service. Published: 2010-10-18T16:00:00.000Z Updated: 2024-08-07T00:45:10.633Z Open on db.gcve.eu Reference links http://secunia.com/advisories/41799 https://kb.juniper.net/KB27373 http://retrogod.altervista.org/9sg_ca_d2d.html http://www.osvdb.org/70233 http://www.exploit-db.com/exploits/15869	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.