wso2 Vulnerability Advisory Catalog

Total 123 security vulnerabilities recorded for wso2 software and firmware.

← Back to All Vendors
CVE-2016-4314 MEDIUM
Component: carbon

Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arbitrary fil...

📅 2017-02-17
CVSS 4.9 Dossier →
CVE-2016-4312 HIGH
Component: identity_server

XML external entity (XXE) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 before WSO2-CARBON-PATCH-4.4.0-0231 allows remote auth...

📅 2017-02-17
CVSS 7.5 Dossier →
CVE-2016-4311 HIGH
Component: identity_server

Cross-site request forgery (CSRF) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack the authenti...

📅 2017-02-17
CVSS 8.8 Dossier →
Page 6 of 6 (123 Total Records)
← Previous Page