Wso2 Luki w zabezpieczeniach

Oś czasu

Rodzaj

Automation Software38
Not Defined22
Forum Software3
Programming Language Software1

Produkt

WSO2 API Manager37
WSO2 IS as Key Manager22
WSO2 Identity Server22
WSO2 Enterprise Integrator17
WSO2 API Microgateway11

Przeciwdziałanie

Official Fix17
Temporary Fix0
Workaround0
Unavailable0
Not Defined47

Wykorzystywanie

High0
Functional0
Proof-of-Concept7
Unproven0
Not Defined57

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent2
Network62

Uwierzytelnianie

Not Defined0
High18
Low22
None24

Interakcja z użytkownikiem

Not Defined0
Required46
None18

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤49
≤522
≤620
≤74
≤85
≤93
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤49
≤523
≤620
≤73
≤85
≤93
≤101

VulDB

≤10
≤20
≤38
≤417
≤520
≤66
≤76
≤85
≤91
≤101

NVD

≤10
≤20
≤30
≤46
≤59
≤611
≤720
≤82
≤95
≤103

CNA

≤10
≤20
≤30
≤48
≤57
≤61
≤74
≤80
≤91
≤101

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k23
<2k31
<5k10
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k63
<2k1
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (26): API Manager (37), API Manager Analytics (10), API Microgateway (11), API manager (1), Business Process Server (1), Business Rules Server (1), Carbon (3), Complex Event Processor (1), Dashboard Server (3), Data Analytics Server (8), Data Services Server (1), Enterprise Integrator (17), IS as Key Manager (22), IS as a Key Manager (1), Identity Server (22), Identity Server Analytics (10), Identity Server as Key Manager (1), IoT Server (5), Machine Learner (1), Management Console (1), Message Broker (1), Micro Integrator (1), SOA Enablement Server for Java (1), WSO2 Micro Integrator (1), carbon-registry (2), transport-http (1)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2023-12-183.63.5WSO2 API Manager Management Console cross site scriptingAutomation SoftwareNot DefinedOfficial Fix0.000450.00CVE-2023-6911
2023-12-155.35.2WSO2 API Manager REST API information disclosureAutomation SoftwareNot DefinedOfficial Fix0.000460.02CVE-2023-6839
2023-12-155.25.1WSO2 API Manager/Identity Server/IS as Key Manager Authentication Endpoint cross site scriptingAutomation SoftwareNot DefinedOfficial Fix0.000460.00CVE-2023-6838
2023-12-154.64.6WSO2 API Manager/IoT Server Forum API Rating privilege escalationAutomation SoftwareNot DefinedOfficial Fix0.000460.00CVE-2023-6835
2023-12-158.07.9WSO2 API Manager/Identity Server/IS as Key Manager JIT Provisioning weak authenticationAutomation SoftwareNot DefinedOfficial Fix0.000500.00CVE-2023-6837
2023-12-155.95.8WSO2 API Manager XML External EntityAutomation SoftwareNot DefinedOfficial Fix0.000870.00CVE-2023-6836
2023-05-234.84.7WSO2 API Manager login.do cross site scriptingAutomation SoftwareNot DefinedOfficial Fix0.000520.03CVE-2023-31664
2022-12-154.44.3WSO2 carbon-registry Request Parameter cross site scriptingNieznanyNot DefinedOfficial Fix0.000800.12CVE-2022-4521
2022-12-154.44.3WSO2 carbon-registry Advanced Search advancedSearchForm-ajaxprocessor.jsp cross site scriptingNieznanyNot DefinedOfficial Fix0.000830.09CVE-2022-4520
2022-09-104.84.8WSO2 Enterprise Integrator Management Console ajaxprocessor.jsp cross site scriptingNieznanyNot DefinedNot Defined0.000720.00CVE-2022-39809

54 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 54 results.

◂ PoprzedniPrzeglądKolejny ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!