Apache Software Foundation Apache Soap vulnerabilities
2 known vulnerabilities affecting apache_software_foundation/apache_soap.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH1
Vulnerabilities
Page 1 of 1
CVE-2022-45378P2CRITICALCVSS 9.8vApache SOAP 2.32022-11-14
CVE-2022-45378 [CRITICAL] CWE-306 CVE-2022-45378: In the default configuration of Apache SOAP, an RPCRouterServlet is available without authentication
In the default configuration of Apache SOAP, an RPCRouterServlet is available without authentication. This gives an attacker the possibility to invoke methods on the classpath that meet certain criteria. Depending on what classes are available on the classpath this might even lead to arbitrary remote code execution. NOTE: This vulnerability only a
nvd
CVE-2022-40705P3HIGHCVSS 7.5≥ 2.2, < Apache SOAP*2022-09-22
CVE-2022-40705 [HIGH] CWE-611 CVE-2022-40705: An Improper Restriction of XML External Entity Reference vulnerability in RPCRouterServlet of Apache
An Improper Restriction of XML External Entity Reference vulnerability in RPCRouterServlet of Apache SOAP allows an attacker to read arbitrary files over HTTP. This issue affects Apache SOAP version 2.2 and later versions. It is unknown whether previous versions are also affected. NOTE: This vulnerability only affects products that are no longer suppo
nvd