Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

wso2 enterprise integrator 6.3.0 vulnerabilities and exploits

(subscribe to this query)
490
VMScore
CVE-2020-24591
The Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates. This affects API Manager up to and including 3.0.0, API Manager Analytics 2.2.0 and 2.5.0, API Microgateway 2.2.0, Enterprise Integrator 6.2.0 and 6.3.0, and Identity Server Analytics...
Wso2 Api ManagerWso2 Api Manager Analytics 2.2.0Wso2 Api Manager Analytics 2.5.0Wso2 Api Microgateway 2.2.0Wso2 Enterprise Integrator 6.2.0Wso2 Enterprise Integrator 6.3.0Wso2 Identity Server Analytics
NA
CVE-2023-6911
Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can be carried out by an attacker injecting a malicious payload into the Registry feature of the Management Console.
Wso2 Api Manager 2.6.0Wso2 Api Manager 3.0.0Wso2 Api Manager 2.2.0Wso2 Api Manager 3.1.0Wso2 Api Manager 3.2.0Wso2 Api Manager 2.5.0Wso2 Api Manager Analytics 2.2.0Wso2 Api Manager Analytics 2.5.0Wso2 Api Microgateway 2.2.0Wso2 Data Analytics Server 3.2.0Wso2 Enterprise Integrator 6.1.1Wso2 Enterprise Integrator 6.5.0Wso2 Enterprise Integrator 6.2.0Wso2 Enterprise Integrator 6.3.0Wso2 Enterprise Integrator 6.4.0Wso2 Enterprise Integrator 6.6.0Wso2 Enterprise Integrator 6.1.0Wso2 Identity Server As Key Manager 5.7.0Wso2 Identity Server As Key Manager 5.5.0Wso2 Identity Server As Key Manager 5.6.0Wso2 Identity Server As Key Manager 5.9.0Wso2 Identity Server As Key Manager 5.10.0
383
VMScore
CVE-2022-29548
A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator...
Wso2 Api Manager 2.6.0Wso2 Identity Server 5.7.0Wso2 Identity Server As Key Manager 5.7.0Wso2 Enterprise Integrator 6.5.0Wso2 Api Microgateway 2.2.0Wso2 Api Manager 3.0.0Wso2 Enterprise Integrator 6.2.0Wso2 Enterprise Integrator 6.3.0Wso2 Api Manager Analytics 2.2.0Wso2 Api Manager Analytics 2.5.0Wso2 Identity Server 5.5.0Wso2 Identity Server Analytics 5.5.0Wso2 Data Analytics Server 3.2.0Wso2 Identity Server As Key Manager 5.5.0Wso2 Api Manager 2.2.0Wso2 Api Manager 3.1.0Wso2 Micro Integrator 1.0.0Wso2 Identity Server Analytics 5.6.0Wso2 Identity Server As Key Manager 5.6.0Wso2 Identity Server As Key Manager 5.9.0Wso2 Identity Server As Key Manager 5.10.0Wso2 Api Manager Analytics 2.6.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook