Lucene search

K
cvelistMitreCVELIST:CVE-2022-39810
HistorySep 09, 2022 - 4:39 p.m.

CVE-2022-39810

2022-09-0916:39:26
mitre
www.cve.org
wso2 enterprise integrator
cross-site scripting
xss
management console
vulnerability
ajax processor
session hijacking

0.001 Low

EPSS

Percentile

31.3%

An issue was discovered in WSO2 Enterprise Integrator 6.4.0. A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in the Management Console under /carbon/ndatasource/validateconnection/ajaxprocessor.jsp via the driver parameter. Session hijacking or similar attacks would not be possible.

0.001 Low

EPSS

Percentile

31.3%

Related for CVELIST:CVE-2022-39810