WSO2 Enterprise Integrator cross-site scripting vulnerability

WSO2 Enterprise Integrator versions prior to 6.6.0 and 6.6.0.204; WSO2 Identity Server versions prior to 5.10.0 and 5.10.0.310, 6.0.0 and 6.0.0.212, 6.1.0 and 6.1.0.195, and 7.0.0 and 7.0.0.64; WSO2 API Manager versions prior to 3.1.0 and 3.1.0.286, 3.2.0 and 3.2.0.376, 3.2.1 and 3.2.1.10, 4.0.0...

WSO2 API Manager side-channel information disclosure vulnerability

WSO2 API Manager versions prior to 3.1.0 through 3.1.0.310, 3.2.0 through 3.2.0.401, 3.2.1 through 3.2.1.26, 4.0.0 through 4.0.0.318, 4.1.0 through 4.1.0.180, 4.2.0 through 4.2.0.119, and 4.3.0 through 4.3.0.30; WSO2 Identity Server as Key Manager versions prior to 5.10.0 through 5.10.0.320; WSO2...

WSO2 Enterprise Integrator Authorization Issue Vulnerability

WSO2 Enterprise Integrator 6.6.0 to 6.6.0.204 before version; WSO2 Identity Server 5.10.0 to 5.10.0.286 before version, 5.11.0 to 5.11.0.344 before version, 6.0.0 to 6.0.0.188 before version, 6.1.0 to 6.1.0.150 before version, and 7.0.0 to 7.0.0.35 before version; WSO2 API Manager 3.1.0 to...

WSO2’s various products have security vulnerabilities

WSO2 API Manager and other products are products of WSO2 Corporation, USA.WSO2 API Manager is a set of API lifecycle management solutions.WSO2 Identity Server IS is an identity server.WSO2 Enterprise Integrator is a set of open source hybrid integration platform. A security vulnerability exists i...

WSO2’s various products have security vulnerabilities

WSO2 API Manager and others are products of WSO2, Inc. of the U.S. WSO2 API Manager is a suite of API lifecycle management solutions.WSO2 Identity Server IS is an identity server.WSO2 Open Banking AM is an open banking gas pedal. A security vulnerability exists in a number of WSO2 products that...

CVE-2022-29464

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a ../../../../repository/deployment/server/webapps...

CVE-2022-29464: Improper Limitation of a Pathname to a Restricted Directory

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a ../../../../repository/deployment/server/webapps...

PT-2022-2322

Name of the Vulnerable Software and Affected Versions WSO2 API Manager versions 2.2.0 through 4.0.0 WSO2 Identity Server versions 5.2.0 through 5.11.0 WSO2 Identity Server Analytics versions 5.4.0, 5.4.1, 5.5.0, and 5.6.0 WSO2 Identity Server as Key Manager versions 5.3.0 through 5.11.0 WSO2...