CVE:CVE-2018-8032
CNNVD:CNNVD-201808-082
Apache Axis是美国阿帕奇（Apache）软件基金会的一个开源、基于XML的Web服务架构，它包含了Java和C++语言实现的SOAP服务器，以及各种公用服务及API，以生成和部署Web服务应用。
Apache Axis 1.x版本至1.4版本中默认的servlet/services存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意的Web脚本或HTML。
solution:Upgrade apache axis to a higher version than 1.4,and avoid the version [1.0,1.4]; Upgrade oracle agile_engineering_data_management to a higher version than 6.2.1.0,and avoid the version 6.2.1.0; Upgrade oracle agile_product_lifecycle_management_framework to a higher version than 9.3.3,and avoid the version 9.3.3; Upgrade oracle application_testing_suite to a higher version than 13.2.0.1,13.3.0.1,and avoid the version 13.2.0.1,13.3.0.1; Upgrade oracle big_data_discovery to a higher version than 1.6,and avoid the version 1.6; Upgrade oracle communications_asap_cartridges to a higher version than 7.2,7.3,and avoid the version 7.2,7.3; Upgrade oracle communications_design_studio to a higher version than 7.3.4.3.0,7.3.5.5.0,7.4.0.4.0,7.4.1.1.0,and avoid the version 7.3.4.3.0,7.3.5.5.0,7.4.0.4.0,7.4.1.1.0; Upgrade oracle communications_element_manager to a higher version than 8.0.0,8.1.0,8.1.1,8.2.0,and avoid the version 8.0.0,8.1.0,8.1.1,8.2.0; Upgrade oracle communications_network_integrity to a higher version than 7.3.5,7.3.6,and avoid the version 7.3.5,7.3.6; Upgrade oracle communications_order_and_service_management to a higher version than 7.3.0.0.0,7.4,and avoid the version 7.3.0.0.0,7.4; Upgrade oracle communications_session_report_manager to a higher version than 8.0.0,8.1.0,8.1.1,8.2.0,and avoid the version 8.0.0,8.1.0,8.1.1,8.2.0; Upgrade oracle communications_session_route_manager to a higher version than 8.0.0,8.1.0,8.1.1,8.2.0,and avoid the version 8.0.0,8.1.0,8.1.1,8.2.0; Upgrade oracle endeca_information_discovery_studio to a higher version than 3.2.0,and avoid the version 3.2.0; Upgrade oracle enterprise_manager_base_platform to a higher version than 12.1.0.5,13.3.0.0,and avoid the version 12.1.0.5,13.3.0.0; Upgrade oracle enterprise_manager_for_fusion_middleware to a higher version than 12.1.0.5,and avoid the version 12.1.0.5; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 7.3.5,8.0.8,and avoid the version [7.3.3,7.3.5],[8.0.0,8.0.8]; Upgrade oracle financial_services_compliance_regulatory_reporting to a higher version than 8.0.8,and avoid the version [8.0.6,8.0.8]; Upgrade oracle financial_services_funds_transfer_pricing to a higher version than 8.0.7,and avoid the version [8.0.2,8.0.7]; Upgrade oracle flexcube_core_banking to a higher version than 11.7.0,11.8.0,11.9.0,11.10.0,and avoid the version 11.7.0,11.8.0,11.9.0,11.10.0; Upgrade oracle flexcube_private_banking to a higher version than 12.0.0,12.1.0,and avoid the version 12.0.0,12.1.0; Upgrade oracle hospitality_guest_access to a higher version than 4.2.0,4.2.1,and avoid the version 4.2.0,4.2.1; Upgrade oracle instantis_enterprisetrack to a higher version than 17.1,17.2,17.3,and avoid the version 17.1,17.2,17.3; Upgrade oracle internet_directory to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle knowledge to a higher version than 8.6.3,and avoid the version [8.6.0,8.6.3]; Upgrade oracle peoplesoft_enterprise_human_capital_management_human_resources to a higher version than 9.2,and avoid the version 9.2; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.56,8.57,8.58,and avoid the version 8.56,8.57,8.58; Upgrade oracle policy_automation_connector_for_siebel to a higher version than 10.4.6,and avoid the version 10.4.6; Upgrade oracle primavera_gateway to a higher version than 16.2.11,17.12.6,and avoid the version 16.2.11,17.12.6; Upgrade oracle primavera_unifier to a higher version than 17.12,16.1,16.2,18.8,19.12,and avoid the version [17.7,17.12],16.1,16.2,18.8,19.12; Upgrade oracle rapid_planning to a higher version than 12.1,12.2,and avoid the version 12.1,12.2; Upgrade oracle real-time_decision_server to a higher version than 3.2.1.0,and avoid the version 3.2.1.0; Upgrade oracle retail_order_broker to a higher version than 15.0,16.0,18.0,and avoid the version 15.0,16.0,18.0; Upgrade oracle retail_xstore_point_of_service to a higher version than 7.1,and avoid the version 7.1; Upgrade oracle secure_global_desktop to a higher version than 5.4,5.5,and avoid the version 5.4,5.5; Upgrade oracle siebel_ui_framework to a higher version than 21.0,and avoid the version (,21.0]; Upgrade oracle tuxedo to a higher version than 12.1.1.0.0,12.1.3,and avoid the version 12.1.1.0.0,12.1.3; Upgrade oracle webcenter_portal to a higher version than 12.2.1.3.0,and avoid the version 12.2.1.3.0; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0