Known vulnerabilities in WSO2 API Manager Analytics
Vendor:
WSO2 Inc.
Software:
WSO2 API Manager Analytics
Software CPE:
cpe:2.3:a:wso2:wso2_api_manager_analytics:*:*:*:*:*:*:*:*
Website:
https://wso2.com/
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU72520 - Improper Control of Generation of Code ('Code Injection') |
CWE-94 | Low | - | 23.02.2023 |
SB2023022327 |
||
| #VU70095 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CWE-79 | Low | - | 09.12.2022 |
SB2022120920 |
||
| #VU66651 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CWE-79 | Low | - | 19.08.2022 |
SB2022081912 |