NetSight
IP …
medium6.1

CVE-2018-8032

Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.

Impact

Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.

Affected products

VendorProductAffected versions
ApacheAxis
from 1.0 through 1.4
OracleAgile Engineering Data Management
Version 6.2.1.0
OracleAgile Product Lifecycle Management
Version 9.3.3
OracleApplication Testing Suite
Versions 13.2.0.1, 13.3.0.1
OracleBig Data Discovery
Version 1.6
OracleCommunications Asap Cartridges
Versions 7.2, 7.3
OracleCommunications Design Studio
Versions 7.3.4.3.0, 7.3.5.5.0, 7.4.0.4.0, 7.4.1.1.0
OracleCommunications Element Manager
Versions 8.0.0, 8.1.0, 8.1.1, 8.2.0
OracleCommunications Network Integrity
Versions 7.3.5, 7.3.6
OracleCommunications Order And Service Management
Versions 7.3.0.0.0, 7.4
OracleCommunications Session Report Manager
Versions 8.0.0, 8.1.0, 8.1.1, 8.2.0
OracleCommunications Session Route Manager
Versions 8.0.0, 8.1.0, 8.1.1, 8.2.0

Weakness classification

CWE-79

References