Apache Soap
2 CVEs affecting Apache Soap. Latest disclosed: 2022-11-14. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-45378 | Critical | 9.8 | 2022-11-14 | In the default configuration of Apache SOAP, an RPCRouterServlet is available without authentication. This gives an attacker the possibility to invoke methods… |
CVE-2022-40705 | High | 7.5 | 2022-09-22 | An Improper Restriction of XML External Entity Reference vulnerability in RPCRouterServlet of Apache SOAP allows an attacker to read arbitrary files over HTTP… |