Carbon

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2016-4316 Maven MEDIUM POC This Month

Multiple cross-site scripting (XSS) vulnerabilities in WSO2 Carbon 4.4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) setName parameter to. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Carbon

NVD Exploit-DB

CVSS 3.0

6.1

EPSS

3.2%

CVE-2016-4315 MEDIUM POC PATCH This Month

Cross-site request forgery (CSRF) vulnerability in WSO2 Carbon 4.4.5 allows remote attackers to hijack the authentication of privileged users for requests that shutdown a server via a shutdown action. Rated medium severity (CVSS 5.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

CSRF Carbon

NVD Exploit-DB

CVSS 3.0

5.7

EPSS

2.7%

CVE-2016-4314 Maven MEDIUM POC PATCH THREAT This Month

Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arbitrary files via a .. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 23.3%.

Path Traversal Carbon

NVD Exploit-DB

CVSS 3.0

4.9

EPSS

23.3%

CVE-2016-4316 Maven

EPSS 3% CVSS 6.1

MEDIUM POC This Month

XSS Carbon

NVD Exploit-DB

CVE-2016-4315

EPSS 3% CVSS 5.7

MEDIUM POC PATCH This Month

CSRF Carbon

NVD Exploit-DB

CVE-2016-4314 Maven

EPSS 23% CVSS 4.9

MEDIUM POC PATCH THREAT This Month

Path Traversal Carbon

NVD Exploit-DB