agentprime: apache-software-foundation-apache-axis2-javaEvery new CVE for apache-software-foundation-apache-axis2-java.https://agentprime.io/CVE-2026-120367: Apache Axis2/Java: unbounded JSON request body bufferinghttps://agentprime.io/advisories/CVE-2026-120367/https://agentprime.io/advisories/CVE-2026-120367/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Nov 2026 10:31:26 GMTCVECVE-2026-123779: Apache Axis2/Java: exposeServiceMetadata not enforced on all metadata routeshttps://agentprime.io/advisories/CVE-2026-123779/https://agentprime.io/advisories/CVE-2026-123779/Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Nov 2026 10:29:30 GMTCVECVE-2026-123753: Apache Axis2/Java: SSRF via WS-Addressing ReplyTo and FaultTo endpointshttps://agentprime.io/advisories/CVE-2026-123753/https://agentprime.io/advisories/CVE-2026-123753/Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Nov 2026 10:28:48 GMTCVECVE-2026-123766: Apache Axis2/Java: Cross-site scripting in the OpenAPI module's Swagger UI pagehttps://agentprime.io/advisories/CVE-2026-123766/https://agentprime.io/advisories/CVE-2026-123766/Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Nov 2026 10:27:49 GMTCVECVE-2026-123770: Apache Axis2/Java: Unbounded multipart and form-encoded request bodieshttps://agentprime.io/advisories/CVE-2026-123770/https://agentprime.io/advisories/CVE-2026-123770/Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Nov 2026 10:26:18 GMTCVECVE-2026-120761: Apache Axis2/Java: XML External Entity (XXE) injection via imported WSDL/XSD documentshttps://agentprime.io/advisories/CVE-2026-120761/https://agentprime.io/advisories/CVE-2026-120761/Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Nov 2026 10:23:21 GMTCVECVE-2026-120832: Apache Axis2/Java: SSRF via WSDL/XSD schema import resolutionhttps://agentprime.io/advisories/CVE-2026-120832/https://agentprime.io/advisories/CVE-2026-120832/Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Nov 2026 10:22:02 GMTCVECVE-2026-66713: Apache Axis2/Java: deserialization of untrusted Datahttps://agentprime.io/advisories/CVE-2026-66713/https://agentprime.io/advisories/CVE-2026-66713/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 13:44:29 GMTCVEcritical