https://archive.apache.org/dist/axis/axis2/java/core/1.7.9/
All official releases are at (not the main mirror system):
Download the full ZIP from Apache Archive, but immediately replace it with 1.7.9-hotfix1 unless you enjoy XML bombs. axis2 1.7 9 jar download
Axis2 1.7.9 still contains class files with @version $Rev: 123456 $ placeholders from 2006 — the build process never replaced them. This makes version verification via class inspection impossible.
Here is the interesting text regarding , focusing on the key details you need. The Curious Case of Axis2 1.7.9 https://archive
<dependency> <groupId>org.apache.axis2</groupId> <artifactId>axis2-kernel</artifactId> <version>1.7.9</version> </dependency>
If you use Maven, you don't download manually at all: Here is the interesting text regarding , focusing
While was officially announced on April 22, 2018 , you won't find a single pre-built axis2-1.7.9.jar file. Instead, Axis2 is distributed as a complete framework containing over 80 JAR files.
The most interesting fact: (CVE-2018-8032) just two months later, leading to the emergency 1.7.9-hotfix1 release on June 24, 2018. If you download plain 1.7.9, you're getting a version with a known security flaw.