WSO2 Carbon 4.4.5
Approved changes feed: RSS · Atom
cpe:2.3:a:wso2:carbon:4.4.5:*:*:*:*:*:*:*
part: a version: 4.4.5 update: *
| Vendor | Wso2 (a7ddf9c6-bb76-50d9-a2c9-02e60ad69877) |
|---|---|
| Product | Carbon (dfbda3ca-5729-5f24-8ccd-8bc4a2a5d028) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-4316 |
vulnerable | 2026-06-08 05:07:47.129273 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in WSO2 Carbon 4.4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) setName parameter to identity-mgt/challenges-mgt.jsp; the (2) webappType or (3) httpPort parameter to webapp-list/webapp_info.jsp; the (4) dsName or (5) description parameter to ndatasource/newdatasource.jsp; the (6) phase parameter to viewflows/handlers.jsp; or the (7) url parameter to ndatasource/validateconnection-ajaxprocessor.jsp.
Published: 2017-02-16T18:00:00.000Z
Updated: 2024-08-06T00:25:14.212Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4315 |
vulnerable | 2026-06-08 05:07:47.128892 |
Details available
Cross-site request forgery (CSRF) vulnerability in WSO2 Carbon 4.4.5 allows remote attackers to hijack the authentication of privileged users for requests that shutdown a server via a shutdown action to server-admin/proxy_ajaxprocessor.jsp.
Published: 2017-02-16T18:00:00.000Z
Updated: 2024-08-06T00:25:14.300Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4314 |
vulnerable | 2026-06-08 05:07:47.128345 |
Details available
Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the logFile parameter to downloadgz-ajaxprocessor.jsp.
Published: 2017-02-16T18:00:00.000Z
Updated: 2024-08-06T00:25:14.191Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.