Login Request a demo
CA
Product
Carbon
by Wso2 · last CVE Feb 17, 2017
3
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 0Medium 3Low 0
Severity
All severities3Critical0High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Carbon to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-4316
6.1
4%
Feb 17
Multiple cross-site scripting (XSS) vulnerabilities in WSO2 Carbon 4.4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) setName parameter to…
Affected: 4.4.5
CVE-2016-4315
5.7
3%
Feb 17
Cross-site request forgery (CSRF) vulnerability in WSO2 Carbon 4.4.5 allows remote attackers to hijack the authentication of privileged users for requests that shutdown a server…
Affected: 4.4.5
CVE-2016-4314
4.9
12%
Feb 17
Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arbitrary files via a
Affected: 4.4.5
Showing 3