Wowza Streaming Engine
5 CVEs affecting Wowza Streaming Engine. Latest disclosed: 2024-11-21. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-52053 | Critical | 9.6 | 2024-11-21 | Stored Cross-Site Scripting in the Manager component of Wowza Streaming Engine below 4.9.1 allows an unauthenticated attacker to inject client-side JavaScript… |
CVE-2024-52052 | High | 7.2 | 2024-11-21 | Wowza Streaming Engine below 4.9.1 permits an authenticated Streaming Engine Manager administrator to define a custom application property and poison a stream… |
CVE-2024-52056 | Medium | 6.5 | 2024-11-21 | Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to delete any directory on the file system if the ta… |
CVE-2024-52055 | Medium | 4.9 | 2024-11-21 | Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to read any file on the file system if the target di… |
CVE-2024-52054 | Low | 2.7 | 2024-11-21 | Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to create an XML definition file anywhere on the fil… |