CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-1632

Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server (WAS) 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, IBM Feature Pack for Web 2.0 1.0.1.0, Apache Synapse, Apache ODE, Apache Tuscany, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a crafted DTD, as demonstrated by an entity declaration in a request to the Synapse SimpleStockQuoteService.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.067

EPSS Ranking 90.7%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2010-1632

Apache » Axis2 » Version: N/A

cpe:2.3:a:apache:axis2:-
Apache » Axis2 » Version: 1.3

cpe:2.3:a:apache:axis2:1.3
Apache » Axis2 » Version: 1.4

cpe:2.3:a:apache:axis2:1.4
Apache » Axis2 » Version: 1.4.1

cpe:2.3:a:apache:axis2:1.4.1
Apache » Axis2 » Version: 1.5

cpe:2.3:a:apache:axis2:1.5
Apache » Axis2 » Version: 1.5.1

cpe:2.3:a:apache:axis2:1.5.1
Apache » Geronimo » Version: N/A

cpe:2.3:a:apache:geronimo:-
Apache » Geronimo » Version: 1.0

cpe:2.3:a:apache:geronimo:1.0
Apache » Geronimo » Version: 1.0.0

cpe:2.3:a:apache:geronimo:1.0.0
Apache » Geronimo » Version: 1.1.0

cpe:2.3:a:apache:geronimo:1.1.0
Apache » Geronimo » Version: 1.1.1

cpe:2.3:a:apache:geronimo:1.1.1
Apache » Geronimo » Version: 1.2

cpe:2.3:a:apache:geronimo:1.2
Apache » Geronimo » Version: 1.2.0

cpe:2.3:a:apache:geronimo:1.2.0
Apache » Geronimo » Version: 2.0

cpe:2.3:a:apache:geronimo:2.0
Apache » Geronimo » Version: 2.0.0

cpe:2.3:a:apache:geronimo:2.0.0
Apache » Geronimo » Version: 2.0.1

cpe:2.3:a:apache:geronimo:2.0.1
Apache » Geronimo » Version: 2.0.2

cpe:2.3:a:apache:geronimo:2.0.2
Apache » Geronimo » Version: 2.1

cpe:2.3:a:apache:geronimo:2.1
Apache » Geronimo » Version: 2.1.0

cpe:2.3:a:apache:geronimo:2.1.0
Apache » Geronimo » Version: 2.1.1

cpe:2.3:a:apache:geronimo:2.1.1
Apache » Geronimo » Version: 2.1.2

cpe:2.3:a:apache:geronimo:2.1.2
Apache » Geronimo » Version: 2.1.3

cpe:2.3:a:apache:geronimo:2.1.3
Apache » Geronimo » Version: 2.1.4

cpe:2.3:a:apache:geronimo:2.1.4
Apache » Geronimo » Version: 2.1.5

cpe:2.3:a:apache:geronimo:2.1.5
Apache » Geronimo » Version: 2.1.6

cpe:2.3:a:apache:geronimo:2.1.6
Apache » Geronimo » Version: 2.1.7

cpe:2.3:a:apache:geronimo:2.1.7
Apache » Geronimo » Version: 2.1.8

cpe:2.3:a:apache:geronimo:2.1.8
Apache » Geronimo » Version: 2.2

cpe:2.3:a:apache:geronimo:2.2
Apache » Geronimo » Version: 2.2.1

cpe:2.3:a:apache:geronimo:2.2.1
Apache » Geronimo » Version: 3.0

cpe:2.3:a:apache:geronimo:3.0
Apache » Geronimo » Version: 3.0.0

cpe:2.3:a:apache:geronimo:3.0.0
Apache » Geronimo » Version: 3.0.1

cpe:2.3:a:apache:geronimo:3.0.1
Apache » Orchestration Director Engine » Version: Any

cpe:2.3:a:apache:orchestration_director_engine:*
Apache » Synapse » Version: 1.0

cpe:2.3:a:apache:synapse:1.0
Apache » Synapse » Version: 1.1

cpe:2.3:a:apache:synapse:1.1
Apache » Synapse » Version: 1.1.1

cpe:2.3:a:apache:synapse:1.1.1
Apache » Synapse » Version: 1.1.2

cpe:2.3:a:apache:synapse:1.1.2
Apache » Synapse » Version: 1.2

cpe:2.3:a:apache:synapse:1.2
Apache » Synapse » Version: 2.0.0

cpe:2.3:a:apache:synapse:2.0.0
Apache » Synapse » Version: 2.1.0

cpe:2.3:a:apache:synapse:2.1.0
Apache » Synapse » Version: 3.0.0

cpe:2.3:a:apache:synapse:3.0.0
Apache » Tuscany » Version: Any

cpe:2.3:a:apache:tuscany:*
Ibm » Websphere Application Server » Version: 7.0

cpe:2.3:a:ibm:websphere_application_server:7.0
Ibm » Websphere Application Server » Version: 7.0.0.1

cpe:2.3:a:ibm:websphere_application_server:7.0.0.1
Ibm » Websphere Application Server » Version: 7.0.0.10

cpe:2.3:a:ibm:websphere_application_server:7.0.0.10
Ibm » Websphere Application Server » Version: 7.0.0.11

cpe:2.3:a:ibm:websphere_application_server:7.0.0.11
Ibm » Websphere Application Server » Version: 7.0.0.12

cpe:2.3:a:ibm:websphere_application_server:7.0.0.12
Ibm » Websphere Application Server » Version: 7.0.0.2

cpe:2.3:a:ibm:websphere_application_server:7.0.0.2
Ibm » Websphere Application Server » Version: 7.0.0.3

cpe:2.3:a:ibm:websphere_application_server:7.0.0.3
Ibm » Websphere Application Server » Version: 7.0.0.4

cpe:2.3:a:ibm:websphere_application_server:7.0.0.4
Ibm » Websphere Application Server » Version: 7.0.0.5

cpe:2.3:a:ibm:websphere_application_server:7.0.0.5
Ibm » Websphere Application Server » Version: 7.0.0.6

cpe:2.3:a:ibm:websphere_application_server:7.0.0.6
Ibm » Websphere Application Server » Version: 7.0.0.7

cpe:2.3:a:ibm:websphere_application_server:7.0.0.7
Ibm » Websphere Application Server » Version: 7.0.0.8

cpe:2.3:a:ibm:websphere_application_server:7.0.0.8
Ibm » Websphere Application Server » Version: 7.0.0.9

cpe:2.3:a:ibm:websphere_application_server:7.0.0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-1632

Products

Pricing

Contact Us