Vulnerability CVE-2017-14651
Published: 2017-09-21   Modified: 2017-09-22

Description:
WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter.

CVSS2 => (AV:N/AC:M/Au:S/C:N/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
3.5/10
2.9/10
6.8/10
Exploit range
Attack complexity
Authentication
Remote
Medium
Single time
Confidentiality impact
Integrity impact
Availability impact
None
Partial
None
Affected software
WSO2 -> Machine learner 
WSO2 -> Storage server 
WSO2 -> Identity server 
WSO2 -> Data analytics server 
WSO2 -> Iot server 
WSO2 -> Enterprise integrator 
WSO2 -> Business rules server 
WSO2 -> Api manager 
WSO2 -> Business process server 
WSO2 -> Dashboard server 
WSO2 -> Message broker 
WSO2 -> Enterprise mobility manager 
WSO2 -> Application server 
WSO2 -> Data services server 
WSO2 -> Complex event processor 
WSO2 -> Governance registry 
WSO2 -> App manager 

 References:
https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2017-0265
https://github.com/cybersecurityworks/Disclosed/issues/15
Copyright 2024, cxsecurity.com

 

Back to Top