Skip to content
Threat Feed
Subscribe

Product

Axis2/Java (<= 2.0.1)

1 brief RSS
low advisory

Apache Axis2/Java: Unbounded JSON request body memory exhaustion (CVE-2026-120367)

Apache Axis2/Java versions prior to 2.0.2 are vulnerable to a denial-of-service condition where unauthenticated attackers can exhaust server memory by sending large, unbounded JSON requests.

Axis2/Java +1
1t 1c updated