https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T16:28:47.456030+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-123766 CVE-2026-123766 — Apache Axis2/Java: Cross-site scripting in the OpenAPI module's Swagger UI page 2026-11-09T16:28:47.457050+00:00

Affected: Apache Software Foundation Apache Axis2/Java

Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability in the OpenAPI module of Apache Axis2/Java. The Swagger UI page served by the OpenAPI module wrote a value derived from the request's Host header into the page without encoding, allowing script injection in the context of the Axis2 origin. This issue affects Apache Axis2/Java: 2.0.1. Users are recommended to upgrade to version 2.0.2, which fixes the issue.