Wso2

Dashboard Server

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.8

CVE-2019-6514

  • EPSS 0.33%
  • Published 14.05.2019 15:29:00
  • Last modified 30.05.2025 16:15:24

An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to inject a JavaScript payload that will be stored in the database and then displayed and executed on the same page, aka XSS.

5.8

CVE-2019-6516

  • EPSS 0.26%
  • Published 14.05.2019 15:29:00
  • Last modified 30.05.2025 16:15:24

An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to force the application to perform requests to the internal workstation (port-scanning) and to perform requests to adjacent workstations (network-scanning), aka SSRF.

6.1

CVE-2017-14995

  • EPSS 0.3%
  • Published 04.10.2017 01:29:03
  • Last modified 20.04.2025 01:37:25

The Management Console in WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2 Business Rules Server 2.2.0, WSO2 Complex Event Processor 4.2.0, WSO2 Dashboard Server 2.0.0, WSO2 Data Analytics Server 3.1.0, WSO2 Data Services Serve...

4.8

CVE-2017-14651

Exploit
  • EPSS 9.25%
  • Published 21.09.2017 18:29:00
  • Last modified 20.04.2025 01:37:25

WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter.