Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 185

Export CSV
CVE-2019-15108

An issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457. There is XSS via a crafted filename to the file-upload feature of the event simulator component.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Wso2
Products
Api Manager
CVE-2019-10797

Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled.

CVSS 3.1 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Wso2
Products
Transport-http
CVE-2018-8716

WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers.

CVSS 3.0 · 5.4 Medium EPSS 38.1% KEV · Not listed
Vendors
Wso2
Products
Identity Server
CVE-2018-20736

An issue was discovered in WSO2 API Manager 2.1.0 and 2.6.0. A DOM-based XSS exists in the store part of the product.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Wso2
Products
Api Manager