Approved changes feed: RSS · Atom

cpe:2.3:a:wowza:streaming_engine:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWowza (ac3a0658-f77b-5011-bd09-4da3f8c271c5)
ProductStreaming Engine (df47a569-b6dd-5693-859b-07fa5a40b0cc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-52056 vulnerable 2026-06-08 06:52:14.666896 Application Delete Path Traversal in Wowza Streaming Engine
Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to delete any directory on the file system if the target directory contains an XML definition file.
Published: 2024-11-21T22:59:40.509Z
Updated: 2024-11-21T23:29:52.680Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52055 vulnerable 2026-06-08 06:52:14.666400 Application Copy Path Traversal in Wowza Streaming Engine
Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to read any file on the file system if the target directory contains an XML definition file.
Published: 2024-11-21T22:54:39.390Z
Updated: 2024-11-21T23:30:17.107Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52054 vulnerable 2026-06-08 06:52:14.665794 Application Creation Path Traversal in Wowza Streaming Engine
Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to create an XML definition file anywhere on the file system.
Published: 2024-11-21T22:46:45.265Z
Updated: 2024-11-21T23:30:52.532Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52053 vulnerable 2026-06-08 06:52:14.665263 Stored Cross-Site Scripting in Wowza Streaming Engine
Stored Cross-Site Scripting in the Manager component of Wowza Streaming Engine below 4.9.1 allows an unauthenticated attacker to inject client-side JavaScript into the web dashboard to automatically hijack admin accounts.
Published: 2024-11-21T22:31:31.947Z
Updated: 2024-11-22T16:10:58.456Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52052 vulnerable 2026-06-08 06:52:14.664515 Stream Target Remote Code Execution in Wowza Streaming Engine
Wowza Streaming Engine below 4.9.1 permits an authenticated Streaming Engine Manager administrator to define a custom application property and poison a stream target for high-privilege remote code execution.
Published: 2024-11-21T22:20:15.758Z
Updated: 2024-11-22T16:11:48.554Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35492 vulnerable 2026-06-08 05:32:48.771604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35491 vulnerable 2026-06-08 05:32:48.771158 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31540 vulnerable 2026-06-08 05:31:53.657550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31539 vulnerable 2026-06-08 05:31:53.657045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9004 vulnerable 2026-06-08 05:27:20.228720 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7656 vulnerable 2026-06-08 05:14:14.635500 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7655 vulnerable 2026-06-08 05:14:14.635037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7654 vulnerable 2026-06-08 05:14:14.634598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19456 vulnerable 2026-06-08 05:13:22.948605 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19455 vulnerable 2026-06-08 05:13:22.948180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19454 vulnerable 2026-06-08 05:13:22.947828 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19453 vulnerable 2026-06-08 05:13:22.947297 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7049 vulnerable 2026-06-08 05:11:54.743524 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7048 vulnerable 2026-06-08 05:11:54.743072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7047 vulnerable 2026-06-08 05:11:54.742660 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16922 vulnerable 2026-06-08 05:09:07.580189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.