Governance Registry
1 CVEs
product
Monthly
WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
XSS
Api Manager
Enterprise Integrator
Identity Server
Application Server
+14
NVD
GitHub
CVSS 3.1
4.8
EPSS
3.7%
EPSS 4%
CVSS 4.8
MEDIUM
POC
PATCH
This Month
WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
XSS
Api Manager
Enterprise Integrator
+16
NVD
GitHub