Maven org.apache.axis:axis

Name: Maven org.apache.axis:axis
Brand: Maven

productUS

pkg:maven/org.apache.axis/axis

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical2high4medium0low

updated 2026-10-27

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-0227US	high7.5	91.9% (100th)	Exploit	no fix	2019-05-01	≤ 1.4
CVE-2007-2353US	medium5.0	27.7% (98th)	Exploit	1.2	2007-04-30	< 1.2
CVE-2018-8032US	medium6.1	10.6% (96th)	Exploit	no fix	2018-08-02	≤ 1.4
CVE-2014-3596US	medium5.8	9.15% (95th)	—	no fix	2014-08-27	≤ 1.4
CVE-2012-5784US	medium5.8	5.72% (93rd)	—	no fix	2012-11-04	≤ 1.4
CVE-2023-40743US	critical9.8	3.28% (88th)	—	no fix	2023-09-05	≤ 1.4
CVE-2023-51441US	high7.2	1.21% (68th)	—	no fix	2024-01-06	≤ 1.3

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation3 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-297Improper Validation of Certificate with Host Mismatch1 CVEs
CWE-75Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.