Wso2 الثغرات

التسلسل الزمني

النوع

Automation Software38
Not Defined22
Forum Software3
Programming Language Software1

منتج

WSO2 API Manager37
WSO2 IS as Key Manager22
WSO2 Identity Server22
WSO2 Enterprise Integrator17
WSO2 API Microgateway11

معالجة

Official Fix17
Temporary Fix0
Workaround0
Unavailable0
Not Defined47

قابلية الاستغلال

High0
Functional0
Proof-of-Concept7
Unproven0
Not Defined57

متجه الوصول

Not Defined0
Physical0
Local0
Adjacent2
Network62

توثيق

Not Defined0
High18
Low22
None24

تفاعل المستخدم

Not Defined0
Required46
None18

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤49
≤522
≤620
≤74
≤85
≤93
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤49
≤523
≤620
≤73
≤85
≤93
≤101

VulDB

≤10
≤20
≤38
≤417
≤520
≤66
≤76
≤85
≤91
≤101

NVD

≤10
≤20
≤30
≤46
≤59
≤611
≤720
≤82
≤95
≤103

CNA

≤10
≤20
≤30
≤48
≤57
≤61
≤74
≤80
≤91
≤101

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k23
<2k31
<5k10
<10k0
<25k0
<50k0
<100k0
≥100k0

إكسبلويت اليوم

<1k63
<2k0
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

🔴 CTI النشاطات

Affected Products (26): API Manager (37), API Manager Analytics (10), API Microgateway (11), API manager (1), Business Process Server (1), Business Rules Server (1), Carbon (3), Complex Event Processor (1), Dashboard Server (3), Data Analytics Server (8), Data Services Server (1), Enterprise Integrator (17), IS as Key Manager (22), IS as a Key Manager (1), Identity Server (22), Identity Server Analytics (10), Identity Server as Key Manager (1), IoT Server (5), Machine Learner (1), Management Console (1), Message Broker (1), Micro Integrator (1), SOA Enablement Server for Java (1), WSO2 Micro Integrator (1), carbon-registry (2), transport-http (1)

منشورBaseTempالثغرةProdق�معالجةEPSSCTICVE
18/12/20233.63.5WSO2 API Manager Management Console سكربتات مشتركةAutomation SoftwareNot DefinedOfficial Fix0.000450.00CVE-2023-6911
15/12/20235.35.2WSO2 API Manager REST API الكشف عن المعلوماتAutomation SoftwareNot DefinedOfficial Fix0.000460.02CVE-2023-6839
15/12/20235.25.1WSO2 API Manager/Identity Server/IS as Key Manager Authentication Endpoint سكربتات مشتركةAutomation SoftwareNot DefinedOfficial Fix0.000460.04CVE-2023-6838
15/12/20234.64.6WSO2 API Manager/IoT Server Forum API Rating تجاوز الصلاحياتAutomation SoftwareNot DefinedOfficial Fix0.000460.00CVE-2023-6835
15/12/20238.07.9WSO2 API Manager/Identity Server/IS as Key Manager JIT Provisioning توثيق ضعيفAutomation SoftwareNot DefinedOfficial Fix0.000500.00CVE-2023-6837
15/12/20235.95.8WSO2 API Manager XML External EntityAutomation SoftwareNot DefinedOfficial Fix0.000870.00CVE-2023-6836
23/05/20234.84.7WSO2 API Manager login.do سكربتات مشتركةAutomation SoftwareNot DefinedOfficial Fix0.000620.03CVE-2023-31664
15/12/20224.44.3WSO2 carbon-registry Request Parameter سكربتات مشتركةغير معروفNot DefinedOfficial Fix0.000800.04CVE-2022-4521
15/12/20224.44.3WSO2 carbon-registry Advanced Search advancedSearchForm-ajaxprocessor.jsp سكربتات مشتركةغير معروفNot DefinedOfficial Fix0.000830.06CVE-2022-4520
10/09/20224.84.8WSO2 Enterprise Integrator Management Console ajaxprocessor.jsp سكربتات مشتركةغير معروفNot DefinedNot Defined0.000720.00CVE-2022-39809

54 بعض الادخالات لم يتم عرضها

🔒 Login Required

You need to signup and login to see more of the remaining 54 results.

التالي ▸نظرة عامة◂ السابق

Do you want to use VulDB in your project?

Use the official API to access entries easily!