CVE-2016-4327 Cross-site scripting (XSS) vulnerability in WSO2 SOA Enablement Server for Java/6.6 build SSJ-6.6-20090827-1616 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_...
MediumCVSS 6.1
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in WSO2 SOA Enablement Server for Java/6.6 build SSJ-6.6-20090827-1616 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| WSO2 enablement server for java | <= 6.6-20090827-1616 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20160517 WSO2 SOA Enablement Server - Reflected Cross-Site Scripting mailing-list
- 85893 third-party-advisory vdb-entry