{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.4"}],"component":"org.apache.axis:axis","cve_ids":["CVE-2019-0227"],"ecosystem":"Maven","epss":0.9194,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-h9gj-rqrw-x4fq","id":"tcs_01M5N906WP8P4ZCSCFBBT6DYQ5","modified_at":"2024-06-25T02:34:58.049130Z","published_at":"2019-05-14T04:02:24Z","references":["https://osv.dev/vulnerability/GHSA-h9gj-rqrw-x4fq","https://nvd.nist.gov/vuln/detail/CVE-2019-0227","https://lists.apache.org/thread.html/r3a5baf5d76f1f2181be7f54da3deab70d7a38b5660b387583d05a8cd%40%3Cjava-user.axis.apache.org%3E","https://lists.apache.org/thread.html/r3a5baf5d76f1f2181be7f54da3deab70d7a38b5660b387583d05a8cd@%3Cjava-user.axis.apache.org%3E","https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E","https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c@%3Cannounce.apache.org%3E","https://rhinosecuritylabs.com/application-security/cve-2019-0227-expired-domain-rce-apache-axis","https://security.netapp.com/advisory/ntap-20240621-0006","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-h9gj-rqrw-x4fq","url":"https://osv.dev/vulnerability/GHSA-h9gj-rqrw-x4fq"}],"summary":"Server Side Request Forgery in Apache Axis"}