WSO2 Identity Server dashboard cross-site scripting vulnerability

WSO2 Identity Server is a U.S. WSO2 company's open source identity services , it supports Information Cards, OpenID and XACML identity framework. dashboard is one of the dashboard components. A cross-site scripting vulnerability exists in dashboard in WSO2 Identity Server version 5.5.0. A remote...

CVE-2018-8716

WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers...

CVE-2018-8716

WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers...

Cross site scripting

WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers...

CVE-2018-8716

WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers...

CVE-2018-8716

WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers...

CVE-2018-8716

WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers...

CVE-2018-8716

CVE-2018-8716 is a stored cross-site scripting vulnerability in WSO2 Identity Server dashboard prior to version 5.5.0. The issue allows low-privilege attackers to inject arbitrary scripts via the dashboard (text inputs), with exploitation described as XSS via the dashboard. The fixed version is 5...

CVE-2018-8716: Improper Neutralization of Input During Web Page Generation

WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers...

PT-2018-18594

Name of the Vulnerable Software and Affected Versions WSO2 Identity Server versions prior to 5.5.0 Description The issue allows low-privileged attackers to perform attacks via the dashboard. Recommendations For versions prior to 5.5.0, update to version 5.5.0 or later to resolve the issue...

WSO2 Identity Server 5.3.0 Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Stored XSS Vulnerabilities product: WSO2 Carbon, WSO2 Dashboard Server vulnerable version: WSO2 Identity Server 5.3.0 fixed version: WSO2 Identity Server 5.5.0 C...

NetIQ Access Manager Identity Server Component Cross-Site Request Forgery Vulnerability

NetIQ Access Manager NAM is a set of resource access control solutions from American NetIQ. The solution provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users.Identity Server is one of the authentication servers. A cross-site request forgery...

Cross site request forgery (csrf)

A CSRF exposure exists in NetIQ Access Manager NAM 4.4 Identity Server component...

CVE-2018-7677

A CSRF exposure exists in NetIQ Access Manager NAM 4.4 Identity Server component...

CVE-2018-7677

A CSRF exposure exists in NetIQ Access Manager NAM 4.4 Identity Server component...

CVE-2018-7677 CSRF in NetIQ Access Manager (NAM) Identity Server component

A CSRF exposure exists in NetIQ Access Manager NAM 4.4 Identity Server component...

CVE-2018-7677

The CVE-2018-7677 entry applies to NetIQ Access Manager (NAM) 4.4 Identity Server component. The vulnerability arises because HTTP requests are not properly validated, creating a cross-site request forgery (CSRF) exposure. This allows an attacker to perform unauthorized operations against the aff...

CVE-2018-7677: Cross-Site Request Forgery (CSRF)

A CSRF exposure exists in NetIQ Access Manager NAM 4.4 Identity Server component...

PT-2018-18203

Name of the Vulnerable Software and Affected Versions NetIQ Access Manager NAM version 4.4 Description A CSRF exposure exists in the Identity Server component. Recommendations For version 4.4, update to a version that includes a fix for this issue...

Identity Server downloadBasicSSOServlet Code Execution

The vulnerability of the downloadBasicSSOServlet component in the Identity Server’s authentication and access control mechanism is related to errors in managing registration data when processing the fileinfo1 parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary...