Wso2

Carbon

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.9

CVE-2016-4314

Exploit
  • EPSS 23.26%
  • Published 17.02.2017 02:59:12
  • Last modified 20.04.2025 01:37:25

Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the logFile parameter to downloadgz-ajaxprocessor.jsp.

5.7

CVE-2016-4315

Exploit
  • EPSS 2.74%
  • Published 17.02.2017 02:59:12
  • Last modified 20.04.2025 01:37:25

Cross-site request forgery (CSRF) vulnerability in WSO2 Carbon 4.4.5 allows remote attackers to hijack the authentication of privileged users for requests that shutdown a server via a shutdown action to server-admin/proxy_ajaxprocessor.jsp.

6.1

CVE-2016-4316

Exploit
  • EPSS 3.16%
  • Published 17.02.2017 02:59:12
  • Last modified 20.04.2025 01:37:25

Multiple cross-site scripting (XSS) vulnerabilities in WSO2 Carbon 4.4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) setName parameter to identity-mgt/challenges-mgt.jsp; the (2) webappType or (3) httpPort parameter to w...