Message Broker

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-6911 Maven MEDIUM PATCH This Month

Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can be carried out by an attacker injecting a malicious payload. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Api Manager Api Manager Analytics Api Microgateway Data Analytics Server +5

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2017-14651 MEDIUM POC PATCH This Month

WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Api Manager App Manager Application Server Business Process Server +13

NVD GitHub

CVSS 3.1

4.8

EPSS

3.7%

CVE-2023-6911 Maven

EPSS 0% CVSS 4.8

MEDIUM PATCH This Month

XSS Api Manager Api Manager Analytics +7

NVD

CVE-2017-14651

EPSS 4% CVSS 4.8

MEDIUM POC PATCH This Month

XSS Api Manager App Manager +15

NVD GitHub