Login Request a demo
IS
Product
Iot Server
by Wso2 · last CVE Dec 15, 2023
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 2Medium 5Low 0
Severity
All severities7Critical0High2Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Iot Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-24705
8.8
1%
Aug 27
An issue was discovered in certain WSO2 products
Affected: 3.1.0
CVE-2020-24703
8.8
1%
Aug 27
An issue was discovered in certain WSO2 products
Affected: 3.3.0; 3.3.1
CVE-2021-36760
6.1
1%
Dec 7
In accountrecoveryendpoint/recoverpassword.do in WSO2 Identity Server 5.7.0, it is possible to perform a DOM-Based XSS attack affecting the callback parameter modifying the URL…
Affected: 3.3.1
CVE-2020-24706
6.1
1%
Aug 27
An issue was discovered in certain WSO2 products
Affected: 3.1.0
CVE-2020-24704
6.1
1%
Aug 27
An issue was discovered in certain WSO2 products
Affected: 3.3.0; 3.3.1
CVE-2023-6835
5.3
1%
Dec 15
Multiple WSO2 products have been identified as vulnerable due to lack of server-side input validation in the Forum feature, API rating could be manipulated
Affected: 3.3.1
CVE-2017-14651
4.8
4%
Sep 21
WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter
Affected: 3.0.0
Showing 7