Apache SOAP vulnerabilities

2 known vulnerabilities in Apache SOAP from Apache. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Apache SOAP: Missing Authentication for Critical Functionality

  CVE-2022-45378Nov 14, 2022ApacheEPSS 2.99%

  In the default configuration of Apache SOAP, an RPCRouterServlet is available without authentication. This gives an attacker the possibility to invoke methods on the classpath that meet certain criteria. Depending on what classes are available on the classpath

• 7.5 High severity

  Apache SOAP: Improper Restriction of XML External Entity Reference

  CVE-2022-40705Sep 22, 2022ApacheEPSS 1.92%

  An Improper Restriction of XML External Entity Reference vulnerability in RPCRouterServlet of Apache SOAP allows an attacker to read arbitrary files over HTTP. This issue affects Apache SOAP version 2.2 and later versions. It is unknown whether previous versio