https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T15:53:20.107356+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-123766 fkie_cve-2026-123766 2026-11-09T15:53:20.108896+00:00

Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability in the OpenAPI module of Apache Axis2/Java. The Swagger UI page served by the OpenAPI module wrote a value derived from the request's Host header into the page without encoding, allowing script injection in the context of the Axis2 origin. This issue affects Apache Axis2/Java: 2.0.1. Users are recommended to upgrade to version 2.0.2, which fixes the issue.

 https://db.gcve.eu/vuln/ghsa-84h8-j9vj-p626 GHSA-84h8-j9vj-p626 2026-11-09T15:53:20.108954+00:00

Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability in the OpenAPI module of Apache Axis2/Java. The Swagger UI page served by the OpenAPI module wrote a value derived from the request's Host header into the page without encoding, allowing script injection in the context of the Axis2 origin. This issue affects Apache Axis2/Java: 2.0.1. Users are recommended to upgrade to version 2.0.2, which fixes the issue.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4415 WID-SEC-W-2026-4415 — Apache Axis2: Mehrere Schwachstellen 2026-11-09T15:53:20.108975+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache Axis2 ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, oder einen Denial of Service Angriff durchzuführen.