Message Broker

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-6911 Dec 18, 09:15 Maven MEDIUM PATCH This Month

Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can be carried out by an attacker injecting a malicious payload. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Api Manager Enterprise Integrator Identity Server Identity Server As Key Manager +6

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2017-14651 Sep 21, 18:29 MEDIUM POC PATCH This Month

WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Api Manager Enterprise Integrator Identity Server Application Server +14

NVD GitHub

CVSS 3.1

4.8

EPSS

3.7%

CVE-2023-6911 Maven

EPSS 0% CVSS 4.8

MEDIUM PATCH This Month

XSS Api Manager Enterprise Integrator +8

NVD

CVE-2017-14651

EPSS 4% CVSS 4.8

MEDIUM POC PATCH This Month

XSS Api Manager Enterprise Integrator +16

NVD GitHub