SOAP Security ModelThe SOAP specification provides very less details about the security considerations. However that does not mean the SOAP communications are inherently secure. It's just that it replies on the security features provided by the transport layer.

For example if SOAP is bound to HTTP, then SOAP request suffer from same vulnerabilities that exits with HTTP communications at the same time the same security mechanisms such as use of Secure Sockets or SSL can be used.