CVE-2018-8032
02.08.2018, 13:29
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.
Vendor | Product | Version |
---|---|---|
apache | axis | 1.0 ≤ 𝑥 ≤ 1.4 |
oracle | agile_engineering_data_management | 6.2.1.0 |
oracle | agile_product_lifecycle_management | 9.3.3 |
oracle | application_testing_suite | 13.2.0.1 |
oracle | application_testing_suite | 13.3.0.1 |
oracle | big_data_discovery | 1.6 |
oracle | communications_asap_cartridges | 7.2 |
oracle | communications_asap_cartridges | 7.3 |
oracle | communications_design_studio | 7.3.4.3.0 |
oracle | communications_design_studio | 7.3.5.5.0 |
oracle | communications_design_studio | 7.4.0.4.0 |
oracle | communications_design_studio | 7.4.1.1.0 |
oracle | communications_element_manager | 8.0.0 |
oracle | communications_element_manager | 8.1.0 |
oracle | communications_element_manager | 8.1.1 |
oracle | communications_element_manager | 8.2.0 |
oracle | communications_network_integrity | 7.3.5 |
oracle | communications_network_integrity | 7.3.6 |
oracle | communications_order_and_service_management | 7.3.0.0.0 |
oracle | communications_order_and_service_management | 7.4 |
oracle | communications_session_report_manager | 8.0.0 |
oracle | communications_session_report_manager | 8.1.0 |
oracle | communications_session_report_manager | 8.1.1 |
oracle | communications_session_report_manager | 8.2.0 |
oracle | communications_session_route_manager | 8.0.0 |
oracle | communications_session_route_manager | 8.1.0 |
oracle | communications_session_route_manager | 8.1.1 |
oracle | communications_session_route_manager | 8.2.0 |
oracle | endeca_information_discovery_studio | 3.2.0 |
oracle | enterprise_manager_base_platform | 12.1.0.5 |
oracle | enterprise_manager_base_platform | 13.3.0.0 |
oracle | enterprise_manager_for_fusion_middleware | 12.1.0.5 |
oracle | financial_services_analytical_applications_infrastructure | 7.3.3 ≤ 𝑥 ≤ 7.3.5 |
oracle | financial_services_analytical_applications_infrastructure | 8.0.0 ≤ 𝑥 ≤ 8.0.8 |
oracle | financial_services_compliance_regulatory_reporting | 8.0.6 ≤ 𝑥 ≤ 8.0.8 |
oracle | financial_services_funds_transfer_pricing | 8.0.2 ≤ 𝑥 ≤ 8.0.7 |
oracle | flexcube_core_banking | 11.7.0 |
oracle | flexcube_core_banking | 11.8.0 |
oracle | flexcube_core_banking | 11.9.0 |
oracle | flexcube_core_banking | 11.10.0 |
oracle | flexcube_private_banking | 12.0.0 |
oracle | flexcube_private_banking | 12.1.0 |
oracle | hospitality_guest_access | 4.2.0 |
oracle | hospitality_guest_access | 4.2.1 |
oracle | instantis_enterprisetrack | 17.1 |
oracle | instantis_enterprisetrack | 17.2 |
oracle | instantis_enterprisetrack | 17.3 |
oracle | internet_directory | 12.2.1.3.0 |
oracle | internet_directory | 12.2.1.4.0 |
oracle | knowledge | 8.6.0 ≤ 𝑥 ≤ 8.6.3 |
oracle | peoplesoft_enterprise_human_capital_management_human_resources | 9.2 |
oracle | peoplesoft_enterprise_peopletools | 8.56 |
oracle | peoplesoft_enterprise_peopletools | 8.57 |
oracle | peoplesoft_enterprise_peopletools | 8.58 |
oracle | policy_automation_connector_for_siebel | 10.4.6 |
oracle | primavera_gateway | 16.2.11 |
oracle | primavera_gateway | 17.12.6 |
oracle | primavera_unifier | 17.7 ≤ 𝑥 ≤ 17.12 |
oracle | primavera_unifier | 16.1 |
oracle | primavera_unifier | 16.2 |
oracle | primavera_unifier | 18.8 |
oracle | primavera_unifier | 19.12 |
oracle | rapid_planning | 12.1 |
oracle | rapid_planning | 12.2 |
oracle | real-time_decision_server | 3.2.1.0 |
oracle | retail_order_broker | 15.0 |
oracle | retail_order_broker | 16.0 |
oracle | retail_order_broker | 18.0 |
oracle | retail_xstore_point_of_service | 7.1 |
oracle | secure_global_desktop | 5.4 |
oracle | secure_global_desktop | 5.5 |
oracle | siebel_ui_framework | 𝑥 ≤ 21.0 |
oracle | tuxedo | 12.1.1.0.0 |
oracle | tuxedo | 12.1.3 |
oracle | webcenter_portal | 12.2.1.3.0 |
debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions

Debian Releases

Ubuntu Releases
References