Apache Software Foundation Axis2/Java

ソフト名：Apache Software Foundation Axis2/Java 1.4.1/1.5
回避策：未対応
脆弱性：セッションの乗っ取り
ソース：http://ws.apache.org/axis2/c/
http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0541.html
http://www.securityfocus.com/bid/41076
危険性：Medium Risk

Apache Software Foundation Axis2/Java

ソフト名：Apache Software Foundation Axis2/Java 1.5.1
回避策：アップデートにて対応
脆弱性：DoS攻撃, 機密情報の奪取
ソース：https://svn.apache.org/repos/asf/axis/axis2/java/core/security/CVE-2010-1632.pdf
https://issues.apache.org/jira/browse/AXIS2-4450
http://www-01.ibm.com/support/docview.wss?uid=swg21433581
http://www.securityfocus.com/bid/40976
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1632
http://secunia.com/advisories/40252
http://secunia.com/advisories/40279
http://www.vupen.com/english/advisories/2010/1528
http://www.vupen.com/english/advisories/2010/1531
CVE：CVE-2010-1632
危険性：Low Risk

Axis2/Java

ソフト名：Apache Software Foundation Axis2/Java 1.4.1
回避策：未対応
脆弱性：RFI
ソース：http://ws.apache.org/axis2/c/
http://www.exploit-db.com/exploits/12721
http://www.securityfocus.com/bid/40343
危険性：Medium Risk

Axis2/Java

ソフト名：Apache Software Foundation Axis2/Java 1.5.1
回避策：未対応
脆弱性：XSS, 認証資格情報の奪取
ソース：http://ws.apache.org/axis2/c/
http://www.exploit-db.com/exploits/12689
http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-03
http://www.securityfocus.com/bid/40327
http://secunia.com/advisories/39906
危険性：Medium Risk