CVE-2012-4418

medium

Apache

CVSS v3 Base Score

5.8

AV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS Score

0.3%

Exploitation probability in 30 days

Top 44% most likely to be exploited

Attack Characteristics

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

None

Published: October 9, 2012 (4965 days ago)

Last Modified: April 29, 2026

Vendor: Apache

Source: NVD

Description

Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."

CWE-287

apache axis2