CVE-2017-14995

Опубликовано: 04 окт. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

The Management Console in WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2 Business Rules Server 2.2.0, WSO2 Complex Event Processor 4.2.0, WSO2 Dashboard Server 2.0.0, WSO2 Data Analytics Server 3.1.0, WSO2 Data Services Server 3.5.1, and WSO2 Machine Learner 1.2.0 is affected by stored XSS.

Ссылки

https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2017-0257
Patch
Vendor Advisory
https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2017-0257
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:wso2:application_server:5.3.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:business_process_server:3.6.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:business_rules_server:2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:complex_event_processor:4.2.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:dashboard_server:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:data_analytics_server:3.1.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:data_services_server:3.5.1:*:*:*:*:*:*:*

cpe:2.3:a:wso2:machine_learner:1.2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.00301

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-432w-hgxc-f9cx