CVE-2019-0227

A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006

published May 1, 2019

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.8th percentile for exploit probability.

CVSS

—

EPSS

92%

Percentile

99.8

In the wild

Unconfirmed

What it is

A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.91940 · 99.8th percentile
Published: 2019-05-01T20:03Z

EPSS history

Timeline

01 MAY 20:03Z
A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006
cvelistv5