Description
Apache Axis2 is installed on this application server. By accessing a specific URL (/services/listServices) it's possible to list all the available web services deployed in this server.
Remediation
If you don't want these services to be publicly available you need to restrict access to the /services/listServices URL.
References
Related Vulnerabilities
WordPress Plugin Download Shortcode Arbitrary File Disclosure (0.1)
WordPress Plugin UserPro-Community and User Profile Multiple Vulnerabilities (5.1.1)
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10334)
WordPress Plugin BackupBuddy Information Disclosure (2.2.28)