GCVE - cpe:2.3:a:wso2:dashboard_server:2.0.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:wso2:dashboard_server:2.0.0:*:*:*:*:*:*:*

part: a version: 2.0.0 update: *

Vendor	Wso2 (`a7ddf9c6-bb76-50d9-a2c9-02e60ad69877`)
Product	Dashboard Server (`cec486fd-6d3b-5efd-8f2c-6832e4a03b5d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-6516`	vulnerable	2026-06-08 05:14:11.798993	Details available An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to force the application to perform requests to the internal workstation (port-scanning) and to perform requests to adjacent workstations (network-scanning), aka SSRF. Published: 2019-05-14T14:50:37.000Z Updated: 2025-05-30T16:01:14.021Z Open on db.gcve.eu Reference links https://www.excellium-services.com/cert-xlm-advisory https://wso2.com/security-patch-releases/dashboard-server https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-6516	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-6514`	vulnerable	2026-06-08 05:14:11.798160	Details available An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to inject a JavaScript payload that will be stored in the database and then displayed and executed on the same page, aka XSS. Published: 2019-05-14T14:35:30.000Z Updated: 2025-05-30T16:01:18.763Z Open on db.gcve.eu Reference links https://www.excellium-services.com/cert-xlm-advisory https://wso2.com/security-patch-releases/dashboard-server https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-6514	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14995`	vulnerable	2026-06-08 05:08:57.719082	Details available The Management Console in WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2 Business Rules Server 2.2.0, WSO2 Complex Event Processor 4.2.0, WSO2 Dashboard Server 2.0.0, WSO2 Data Analytics Server 3.1.0, WSO2 Data Services Server 3.5.1, and WSO2 Machine Learner 1.2.0 is affected by stored XSS. Published: 2017-10-03T07:00:00.000Z Updated: 2024-08-05T19:42:22.298Z Open on db.gcve.eu Reference links https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2017-0257	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14651`	vulnerable	2026-06-08 05:08:50.387906	Details available WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter. Published: 2017-09-21T18:00:00.000Z Updated: 2024-08-05T19:34:39.735Z Open on db.gcve.eu Reference links https://github.com/cybersecurityworks/Disclosed/issues/15 https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2017-0265 https://cybersecurityworks.com/zerodays/cve-2017-14651-wso2.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.