vulnerability

Red Hat: CVE-2019-0227: axis: Hard coded domain name in example web service named “StockQuoteService.jws” leading to remote code execution.

Name: Red Hat: CVE-2019-0227: axis: Hard coded domain name in example web service named “StockQuoteService.jws” leading to remote code execution.
Creator: Red Hat
Published: 2019-05-01T00:00:00.000Z
Keywords: CVE, Red Hat, 2019, 0227, axis, no-fix-redhat-rpm-package, Severity 5

Try Surface Command

Back to search

Severity

CVSS

(AV:A/AC:M/Au:N/C:P/I:P/A:P)

Published

May 1, 2019

Added

Jul 9, 2025

Modified

Jul 9, 2025

Description

A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.

Solution

no-fix-redhat-rpm-package

References

NVD-CVE-2019-0227

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report