** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users with access to the admin service to perform possible SSRF This issue affects Apache Axis: through 1.3. As Axis 1 has been EOL we recommend you migrate to a different SOAP engine, such as Apache Axis 2/Java. Alternatively you could use a build of Axis with the patch from https://github.com/apache/axis-axis1-java/commit/685c309febc64aa393b2d64a05f90e7eb9f73e06 applied. The Apache Axis project does not expect to create an Axis 1.x release fixing this problem, though contributors that would like to work towards this are welcome.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users with     access to the admin service to perform possible SSRF This issue affects Apache Axis: through 1.3. As Axis     1 has been EOL we recommend you migrate to a different SOAP engine, such as Apache Axis 2/Java.
    Alternatively you could use a build of Axis with the patch from https://github.com/apache/axis-     axis1-java/commit/685c309febc64aa393b2d64a05f90e7eb9f73e06 applied. The Apache Axis project does not     expect to create an Axis 1.x release fixing this problem, though contributors that would like to work     towards this are welcome. (CVE-2023-51441)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0851-1 advisory.

  - ** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users with     access to the admin service to perform possible SSRF This issue affects Apache Axis: through 1.3. As Axis     1 has been EOL we recommend you migrate to a different SOAP engine, such as Apache Axis 2/Java.
    Alternatively you could use a build of Axis with the patch from https://github.com/apache/axis-     axis1-java/commit/685c309febc64aa393b2d64a05f90e7eb9f73e06 applied. The Apache Axis project does not     expect to create an Axis 1.x release fixing this problem, though contributors that would like to work     towards this are welcome. (CVE-2023-51441)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0852-1 advisory.

  - ** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users with     access to the admin service to perform possible SSRF This issue affects Apache Axis: through 1.3. As Axis     1 has been EOL we recommend you migrate to a different SOAP engine, such as Apache Axis 2/Java.
    Alternatively you could use a build of Axis with the patch from https://github.com/apache/axis-     axis1-java/commit/685c309febc64aa393b2d64a05f90e7eb9f73e06 applied. The Apache Axis project does not     expect to create an Axis 1.x release fixing this problem, though contributors that would like to work     towards this are welcome. (CVE-2023-51441)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
253099	Linux Distros Unpatched Vulnerability : CVE-2023-51441	Nessus	Misc.	high
192013	SUSE SLES12 Security Update : axis (SUSE-SU-2024:0851-1)	Nessus	SuSE Local Security Checks	high
192005	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : axis (SUSE-SU-2024:0852-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2023-51441

high

Tenable Plugins

high

high

high