Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:apache:axis2:*:*:*:*:*:java:*:*

2 briefs RSS
low advisory

Apache Axis2/Java: Unbounded JSON request body memory exhaustion (CVE-2026-120367)

Apache Axis2/Java versions prior to 2.0.2 are vulnerable to a denial-of-service condition where unauthenticated attackers can exhaust server memory by sending large, unbounded JSON requests.

Axis2/Java
1t 1c
low advisory

Apache Axis2/Java: Inconsistent enforcement of exposeServiceMetadata (CVE-2026-123779)

Apache Axis2/Java contains a forced browsing vulnerability where the exposeServiceMetadata parameter is not enforced on specific routes, allowing unauthorized metadata disclosure.

Axis2/Java
1t 1c