CVE-2018-8032
MediumPublished
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.
- Published
- Aug 2, 2018
- Updated
- Sep 16, 2024
- Assigning CNA
- apache
- Evidence observed
- Aug 8, 2026
Primary CVSS
6.1/ 10Medium
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N10.6%
Moderate · next 30 days
- Percentile
- 95.6%
- Model date
- Sep 21, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.
Sources
1- CVE-2018-8032Patch
从老外那里下载了该漏洞的修复工程，无奈依赖包实在是太多下不下来，选取其中axis工程打成jar包后发现已成功修复项目的漏洞，有需要的亲可以下载重新打jar包替换即可。 clone后用idea打axis这个jar包即可
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.