WSO2 Identity Server Analytics 5.4.1
Approved changes feed: RSS · Atom
cpe:2.3:a:wso2:identity_server_analytics:5.4.1:*:*:*:*:*:*:*
part: a version: 5.4.1 update: *
| Vendor | Wso2 (a7ddf9c6-bb76-50d9-a2c9-02e60ad69877) |
|---|---|
| Product | Identity Server Analytics (d2a6ca24-d343-5016-a7f8-f8fe86513f33) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-6911 |
vulnerable | 2026-06-08 06:21:56.286359 |
Details available
MEDIUM (4.8)
Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can be carried out by an attacker injecting a malicious payload into the Registry feature of the Management Console.
Published: 2023-12-18T08:32:58.961Z
Updated: 2024-08-02T08:42:08.416Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29464 |
vulnerable | 2026-06-08 05:42:47.812065 |
Details available
CRITICAL (9.8)
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a ../../../../repository/deployment/server/webapps directory. This affects WSO2 API Manager 2.2.0 up to 4.0.0, WSO2 Identity Server 5.2.0 up to 5.11.0, WSO2 Identity Server Analytics 5.4.0, 5.4.1, 5.5.0 and 5.6.0, WSO2 Identity Server as Key Manager 5.3.0 up to 5.11.0, WSO2 Enterprise Integrator 6.2.0 up to 6.6.0, WSO2 Open Banking AM 1.4.0 up to 2.0.0 and WSO2 Open Banking KM 1.4.0, up to 2.0.0.
Published: 2022-04-18T00:00:00.000Z
Updated: 2025-10-21T23:15:41.688Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-17453 |
vulnerable | 2026-06-08 05:20:56.521105 |
Details available
WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter.
Published: 2021-04-05T00:00:00.000Z
Updated: 2024-08-04T13:53:17.471Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.