Количество 12
Количество 12
GHSA-55w9-c3g2-4rrh
Man-in-the-middle attack in Apache Axis
CVE-2012-5784
Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
CVE-2012-5784
Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
CVE-2012-5784
Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
CVE-2012-5784
Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Ma ...
ELSA-2013-0683
ELSA-2013-0683: axis security update (MODERATE)
ELSA-2013-0269
ELSA-2013-0269: axis security update (MODERATE)
openSUSE-SU-2019:1526-1
Security update for axis
openSUSE-SU-2019:1497-1
Security update for axis
SUSE-SU-2019:1382-1
Security update for axis
SUSE-SU-2019:1373-2
Security update for axis
SUSE-SU-2019:1373-1
Security update for axis
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-55w9-c3g2-4rrh Man-in-the-middle attack in Apache Axis | 6% Низкий | почти 6 лет назад | |
 | CVE-2012-5784 Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. | CVSS2: 5.8 | 6% Низкий | больше 13 лет назад |
 | CVE-2012-5784 Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. | CVSS2: 4.3 | 6% Низкий | почти 14 лет назад |
 | CVE-2012-5784 Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. | CVSS2: 5.8 | 6% Низкий | больше 13 лет назад |
| CVE-2012-5784 Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Ma ... | CVSS2: 5.8 | 6% Низкий | больше 13 лет назад |
| ELSA-2013-0683 ELSA-2013-0683: axis security update (MODERATE) | 6% Низкий | больше 13 лет назад | |
| ELSA-2013-0269 ELSA-2013-0269: axis security update (MODERATE) | 6% Низкий | больше 13 лет назад | |
 | openSUSE-SU-2019:1526-1 Security update for axis | около 7 лет назад | ||
| openSUSE-SU-2019:1497-1 Security update for axis | около 7 лет назад | ||
| SUSE-SU-2019:1382-1 Security update for axis | около 7 лет назад | ||
| SUSE-SU-2019:1373-2 Security update for axis | почти 7 лет назад | ||
| SUSE-SU-2019:1373-1 Security update for axis | около 7 лет назад |
Уязвимостей на страницу