What’s Vulnerable › Vulnerabilities

CVE-2012-4418

• Severity: medium (CVSS 5.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2012-10-09 · updated 2026-06-16
• Weakness: CWE-287

Description

Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."

Affected products

• Apache Axis2: all versions

References

• http://www.nds.rub.de/media/nds/veroeffentlichungen/2012/08/22/BreakingSAML_3.pdf
• http://www.openwall.com/lists/oss-security/2012/09/12/1
• http://www.openwall.com/lists/oss-security/2012/09/13/1
• http://www.securityfocus.com/bid/55508
• https://bugzilla.redhat.com/show_bug.cgi?id=856755
• http://www.nds.rub.de/media/nds/veroeffentlichungen/2012/08/22/BreakingSAML_3.pdf
• http://www.openwall.com/lists/oss-security/2012/09/12/1
• http://www.openwall.com/lists/oss-security/2012/09/13/1
• http://www.securityfocus.com/bid/55508
• https://bugzilla.redhat.com/show_bug.cgi?id=856755

Get alerted when CVE-2012-4418 or the next vulnerability affects your stack