Lucene search
+L

8 matches found

Nuclei
Nuclei
•added 2026/10/25 2:06 a.m.•130 views

WSO2 - Cross-Site Scripting

WSO2 contains a reflected cross-site scripting vulnerability in the Management Console of API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0,...

6.1CVSS6.1AI score0.41078EPSS
SaveExploits6References5
Positive Technologies
Positive Technologies
•added 2025/11/05 12:00 a.m.•27 views

PT-2025-45148

Name of the Vulnerable Software and Affected Versions WSO2 Micro Integrator affected versions not specified WSO2 Enterprise Integrator affected versions not specified WSO2 API Manager affected versions not specified Description An arbitrary code execution issue exists due to insufficient...

8.4CVSS6.6AI score0.00471EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/05 12:00 a.m.•29 views

WSO2’s various products have security vulnerabilities

WSO2 API Manager and other products are products of WSO2 Corporation, USA.WSO2 API Manager is a set of API lifecycle management solution.WSO2 Identity Server IS is an identity server.WSO2 Enterprise Integrator is a set of open source hybrid integration platform. A security vulnerability exists in...

8.4CVSS6.4AI score0.00596EPSS
SaveExploits0References1
Prion
Prion
•added 2022/04/21 2:15 a.m.•36 views

Cross site scripting

A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0,...

4.3CVSS5.9AI score0.41078EPSS
SaveExploits6References3Affected Software9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/21 12:00 a.m.•10 views

CVE-2022-29548: Improper Neutralization of Input During Web Page Generation

A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0,...

6.1CVSS6.3AI score0.41078EPSS
SaveExploits6References2
CVE
CVE
•added 2022/04/21 12:00 a.m.•813 views

CVE-2022-29548

CVE-2022-29548 is a reflected Cross-Site Scripting (XSS) vulnerability in the WSO2 Management Console affecting API Manager and related products (e.g., API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0–3.2.0, 4.0.0; API Manager Analytics; API Microgateway; Data Analytics Server; Enterprise Integrator; IS as...

6.1CVSS5.8AI score0.41078EPSS
SaveExploits6References3Affected Software9
osv_cve
osv_cve
•added 2022/04/21 12:00 a.m.•45 views

CVE-2022-29548

A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0,...

4.6CVSS5.9AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/04/01 12:00 a.m.•27 views

PT-2022-2550 · Wso2 · Wso2 Identity Server Analytics +8

Name of the Vulnerable Software and Affected Versions: WSO2 API Manager versions 2.2.0 through 4.0.0 WSO2 API Manager Analytics versions 2.2.0 through 2.6.0 WSO2 API Microgateway version 2.2.0 WSO2 Data Analytics Server version 3.2.0 WSO2 Enterprise Integrator versions 6.2.0 through 6.6.0 WSO2 IS...

6.1CVSS5.9AI score0.41078EPSS
SaveExploits6References11
Rows per page
Query Builder