Complex Event Processor

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2017-14995 MEDIUM PATCH This Month

The Management Console in WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2 Business Rules Server 2.2.0, WSO2 Complex Event Processor 4.2.0, WSO2 Dashboard Server 2.0.0, WSO2. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Application Server Business Process Server Business Rules Server Complex Event Processor +4

NVD

CVSS 3.0

6.1

EPSS

0.3%

CVE-2017-14651 MEDIUM POC PATCH This Month

WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Api Manager App Manager Application Server Business Process Server +13

NVD GitHub

CVSS 3.1

4.8

EPSS

3.7%

CVE-2017-14995

EPSS 0% CVSS 6.1

MEDIUM PATCH This Month

XSS Application Server Business Process Server +6

NVD

CVE-2017-14651

EPSS 4% CVSS 4.8

MEDIUM POC PATCH This Month

XSS Api Manager App Manager +15

NVD GitHub