CVE-2017-14995 The Management Console in WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2 Business Rules Server 2.2.0, WSO2 Complex Event Processor 4.2.0, WSO2 Dashboard Server 2.0.0, WSO2 Dat...
MediumCVSS 6.1
EPSS 0.64%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Management Console in WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2 Business Rules Server 2.2.0, WSO2 Complex Event Processor 4.2.0, WSO2 Dashboard Server 2.0.0, WSO2 Data Analytics Server 3.1.0, WSO2 Data Services Server 3.5.1, and WSO2 Machine Learner 1.2.0 is affected by stored XSS.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| WSO2 application server | = 5.3.0 | No fix listed |
| WSO2 Business Process Server | = 3.6.0 | No fix listed |
| WSO2 business rules server | = 2.2.0 | No fix listed |
| WSO2 complex event processor | = 4.2.0 | No fix listed |
| WSO2 dashboard server | = 2.0.0 | No fix listed |
| WSO2 data analytics server | = 3.1.0 | No fix listed |
| WSO2 data services server | = 3.5.1 | No fix listed |
| WSO2 machine learner | = 1.2.0 | No fix listed |
References
- docs.wso2.com patch vendor-advisory