Test Kennung:	1.3.6.1.4.1.25623.1.0.140393
Kategorie:	Web application abuses
Titel:	WSO2 Complex Event Processor Multiple XSS Vulnerabilities
Zusammenfassung:	WSO2 Complex Event Processor is prone to; multiple cross-site scripting vulnerabilities.
Beschreibung:	Summary: WSO2 Complex Event Processor is prone to multiple cross-site scripting vulnerabilities. Vulnerability Insight: A potential Reflected Cross-Site Scripting (XSS) vulnerability has been identified in the Management Console and a potential Stored Cross Site Scripting (XSS) vulnerability is detected in a JavaScript utility used for displaying messages in the Management Console. Vulnerability Impact: By leveraging an XSS attack, an attacker can make the browser get redirected to a malicious website, make changes in the UI of the web page, retrieve information from the browser or harm otherwise. Affected Software/OS: WSO2 Complex Event Processor 4.2.0 and probably prior. Solution: Apply the provide patch. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-14651 Common Vulnerability Exposure (CVE) ID: CVE-2017-14995
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.