CVE-2007-2353
apache axis: no CVSS score yet. EPSS 28% chance of exploitation in the next 30 days. Fixed in org.apache.axis:axis 1.2.
Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the resulting exception message.
- EPSS
- 28% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-11-01)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-2c4w-2px5-9x3x | Maven | org.apache.axis:axis | <1.2 | 1.2 |