Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2012-5785

Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.8%
CVSS Severity
CVSS v2 Score 5.8
Products affected by CVE-2012-5785
  • Apache » Axis2 » Version: N/A
    cpe:2.3:a:apache:axis2:-
  • Apache » Axis2 » Version: 1.3
    cpe:2.3:a:apache:axis2:1.3
  • Apache » Axis2 » Version: 1.4
    cpe:2.3:a:apache:axis2:1.4
  • Apache » Axis2 » Version: 1.4.1
    cpe:2.3:a:apache:axis2:1.4.1
  • Apache » Axis2 » Version: 1.5
    cpe:2.3:a:apache:axis2:1.5
  • Apache » Axis2 » Version: 1.5.1
    cpe:2.3:a:apache:axis2:1.5.1
  • Apache » Axis2 » Version: 1.5.2
    cpe:2.3:a:apache:axis2:1.5.2
  • Apache » Axis2 » Version: 1.5.3
    cpe:2.3:a:apache:axis2:1.5.3
  • Apache » Axis2 » Version: 1.5.4
    cpe:2.3:a:apache:axis2:1.5.4
  • Apache » Axis2 » Version: 1.5.5
    cpe:2.3:a:apache:axis2:1.5.5
  • Apache » Axis2 » Version: 1.5.6
    cpe:2.3:a:apache:axis2:1.5.6
  • Apache » Axis2 » Version: 1.6
    cpe:2.3:a:apache:axis2:1.6
  • Apache » Axis2 » Version: 1.6.1
    cpe:2.3:a:apache:axis2:1.6.1
  • Apache » Axis2 » Version: 1.6.2
    cpe:2.3:a:apache:axis2:1.6.2


Products
Pricing
Contact Us

Shodan ® - All rights reserved