Approved changes feed: RSS · Atom

cpe:2.3:a:apache:axis2:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductAxis2 (8e522fa9-af7c-5272-98f9-99a4f055958e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/axis purl2cpe 2026-06-01 10:14:29.626238
pkg:deb/debian/axis purl2cpe 2026-06-01 10:14:29.626241
pkg:deb/ubuntu/axis purl2cpe 2026-06-01 10:14:29.626244
pkg:github/apache/axis-site purl2cpe 2026-06-01 10:14:29.626247
pkg:maven/org.apache.axis2/axis2 purl2cpe 2026-06-01 10:14:29.626249

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-5351 vulnerable 2026-06-08 05:02:56.246989 Details available
Apache Axis2 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack," a different vulnerability than CVE-2012-4418.
Published: 2012-10-09T23:00:00.000Z
Updated: 2024-08-06T21:05:47.052Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4418 vulnerable 2026-06-08 05:02:17.383950 Details available
Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."
Published: 2012-10-09T23:00:00.000Z
Updated: 2024-08-06T20:35:09.539Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.