CVE-2019-0227
01.05.2019, 21:29
A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.
| Vendor | Product | Version |
|---|---|---|
| apache | axis | 1.4 |
| oracle | agile_engineering_data_management | 6.2.1.0 |
| oracle | agile_product_lifecycle_management | 9.3.3 |
| oracle | application_testing_suite | 13.2.0.1 |
| oracle | application_testing_suite | 13.3.0.1 |
| oracle | big_data_discovery | 1.6 |
| oracle | communications_asap_cartridges | 7.2 |
| oracle | communications_asap_cartridges | 7.3 |
| oracle | communications_design_studio | 7.3.4.3.0 |
| oracle | communications_design_studio | 7.3.5.5.0 |
| oracle | communications_design_studio | 7.4.0.4.0 |
| oracle | communications_design_studio | 7.4.1.1.0 |
| oracle | communications_element_manager | 8.0.0 |
| oracle | communications_element_manager | 8.1.0 |
| oracle | communications_element_manager | 8.1.1 |
| oracle | communications_element_manager | 8.2.0 |
| oracle | communications_network_integrity | 7.3.5 |
| oracle | communications_network_integrity | 7.3.6 |
| oracle | communications_order_and_service_management | 7.3.0.0.0 |
| oracle | communications_order_and_service_management | 7.4 |
| oracle | communications_session_report_manager | 8.0.0 |
| oracle | communications_session_report_manager | 8.1.0 |
| oracle | communications_session_report_manager | 8.1.1 |
| oracle | communications_session_report_manager | 8.2.0 |
| oracle | communications_session_route_manager | 8.0.0 |
| oracle | communications_session_route_manager | 8.1.0 |
| oracle | communications_session_route_manager | 8.1.1 |
| oracle | communications_session_route_manager | 8.2.0 |
| oracle | endeca_information_discovery_studio | 3.2.0 |
| oracle | enterprise_manager_base_platform | 12.1.0.5 |
| oracle | enterprise_manager_base_platform | 13.3.0.0 |
| oracle | enterprise_manager_for_fusion_middleware | 12.1.0.5 |
| oracle | financial_services_analytical_applications_infrastructure | 7.3.3 ≤ 𝑥 ≤ 7.3.5 |
| oracle | financial_services_analytical_applications_infrastructure | 8.0.0 ≤ 𝑥 ≤ 8.0.8 |
| oracle | financial_services_compliance_regulatory_reporting | 8.0.6 ≤ 𝑥 ≤ 8.0.8 |
| oracle | financial_services_funds_transfer_pricing | 8.0.2 ≤ 𝑥 ≤ 8.0.7 |
| oracle | flexcube_core_banking | 11.7.0 |
| oracle | flexcube_core_banking | 11.8.0 |
| oracle | flexcube_core_banking | 11.9.0 |
| oracle | flexcube_core_banking | 11.10.0 |
| oracle | flexcube_private_banking | 12.0.0 |
| oracle | flexcube_private_banking | 12.1.0 |
| oracle | hospitality_guest_access | 4.2.0 |
| oracle | hospitality_guest_access | 4.2.1 |
| oracle | instantis_enterprisetrack | 17.1 |
| oracle | instantis_enterprisetrack | 17.2 |
| oracle | instantis_enterprisetrack | 17.3 |
| oracle | internet_directory | 12.2.1.3.0 |
| oracle | internet_directory | 12.2.1.4.0 |
| oracle | knowledge | 8.6.0 ≤ 𝑥 ≤ 8.6.3 |
| oracle | peoplesoft_enterprise_human_capital_management_human_resources | 7.3.5 |
| oracle | peoplesoft_enterprise_human_capital_management_human_resources | 7.3.6 |
| oracle | peoplesoft_enterprise_human_capital_management_human_resources | 9.2 |
| oracle | peoplesoft_enterprise_peopletools | 8.56 |
| oracle | peoplesoft_enterprise_peopletools | 8.57 |
| oracle | peoplesoft_enterprise_peopletools | 8.58 |
| oracle | policy_automation_connector_for_siebel | 10.4.6 |
| oracle | primavera_gateway | 16.2.11 |
| oracle | primavera_gateway | 17.12.6 |
| oracle | primavera_unifier | 17.7 ≤ 𝑥 ≤ 17.12 |
| oracle | primavera_unifier | 16.1 |
| oracle | primavera_unifier | 16.2 |
| oracle | primavera_unifier | 18.8 |
| oracle | primavera_unifier | 19.12 |
| oracle | rapid_planning | 12.1 |
| oracle | rapid_planning | 12.2 |
| oracle | real-time_decision_server | 3.2.1.0 |
| oracle | retail_order_broker | 15.0 |
| oracle | retail_order_broker | 16.0 |
| oracle | retail_order_broker | 18.0 |
| oracle | retail_xstore_point_of_service | 7.1 |
| oracle | secure_global_desktop | 5.4 |
| oracle | secure_global_desktop | 5.5 |
| oracle | siebel_ui_framework | 𝑥 ≤ 21.0 |
| oracle | tuxedo | 12.1.1.0.0 |
| oracle | tuxedo | 12.1.3 |
| oracle | webcenter_portal | 12.2.1.3.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References