CVE-2017-14995: XSS
First published: Wed Oct 04 2017(Updated: )
The Management Console in WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2 Business Rules Server 2.2.0, WSO2 Complex Event Processor 4.2.0, WSO2 Dashboard Server 2.0.0, WSO2 Data Analytics Server 3.1.0, WSO2 Data Services Server 3.5.1, and WSO2 Machine Learner 1.2.0 is affected by stored XSS.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| WSO2 Application Server | =5.3.0 | |
| WSO2 Business Process Server | =3.6.0 | |
| WSO2 Business Rules Server | =2.2.0 | |
| WSO2 Complex Event Processor | =4.2.0 | |
| WSO2 Dashboard Server | =2.0.0 | |
| WSO2 Data Analytics Server | =3.1.0 | |
| WSO2 Data Services Server | =3.5.1 | |
| WSO2 Machine Learner | =1.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2017-14995?
CVE-2017-14995 is categorized as a moderate severity vulnerability.
How do I fix CVE-2017-14995?
To fix CVE-2017-14995, it is recommended to upgrade to the patched versions of affected WSO2 products.
Which WSO2 products are affected by CVE-2017-14995?
CVE-2017-14995 affects WSO2 Application Server 5.3.0, Business Process Server 3.6.0, and several other WSO2 products.
What type of vulnerability is CVE-2017-14995?
CVE-2017-14995 is a security vulnerability in the Management Console of WSO2 products.
Is there a workaround for CVE-2017-14995?
No specific workaround for CVE-2017-14995 is mentioned; upgrading is the recommended action.
- collector/nvd-index
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/tags
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- vendor/wso2
- canonical/wso2 application server
- version/wso2 application server/5.3.0
- canonical/wso2 business process server
- version/wso2 business process server/3.6.0
- canonical/wso2 business rules server
- version/wso2 business rules server/2.2.0
- canonical/wso2 complex event processor
- version/wso2 complex event processor/4.2.0
- canonical/wso2 dashboard server
- version/wso2 dashboard server/2.0.0
- canonical/wso2 data analytics server
- version/wso2 data analytics server/3.1.0
- canonical/wso2 data services server
- version/wso2 data services server/3.5.1
- canonical/wso2 machine learner
- version/wso2 machine learner/1.2.0