org.apache.axis2:axis2 (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.apache.axis2:axis2, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2012-5351 — CVSS 6.4 (medium): Apache Axis2 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a…
• CVE-2012-4418 — CVSS 5.8 (medium): Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."
• CVE-2012-5785 — CVSS 5.8 (medium): Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or…