Apache Axis allows Exposure of Sensitive Information to an Unauthorized Actor

中危 5.0CVE-2007-2353 · GHSA-2c4w-2px5-9x3x · Published 30/04/2007 · updated 16/06/2026

要点

CVE-2007-2353 是影响 org.apache.axis:axis, axis (apache) 的中危 (CVSS 5.0)漏洞。
未来 30 天内被利用的概率（EPSS）：27.7%，高于 98.1% 的漏洞。
修复：升级到 1.2 或更高版本。

Package	Affected versions	Patched versions
org.apache.axis:axis Maven	`< 1.2`	`1.2`
axis apache	`= 1.0`	No fix yet

Description

Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the resulting exception message.

NVD description

Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the resulting exception message.

References

nvd.nist.gov/vuln/detail/CVE-2007-2353 · ADVISORY
albfernandez/axis1-java · WEB
albfernandez/axis1-java commit 32f3503 · WEB
apache/axis-axis1-java commit 2fdbb91 · WEB
apache/axis-axis1-java commit 7ba89de · WEB
exchange.xforce.ibmcloud.com/vulnerabilities/34167 · WEB
apache/axis-axis1-java · PACKAGE
attrition.org/pipermail/vim/2007-April/001562.html · WEB
osvdb.org/34154
securityfocus.com/bid/23687 · Exploit

org.apache.axis:axis 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.apache.axis:axis

Maven

< 1.2

1.2

axis

apache

= 1.0

No fix yet

Description

Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the resulting exception message.

NVD description

Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the resulting exception message.

org.apache.axis:axis 的其他漏洞

查看全部 →