Wso2 Carbon
3 CVEs affecting Wso2 Carbon. Latest disclosed: 2017-02-17. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-4316 | Medium | 6.1 | 2017-02-17 | Multiple cross-site scripting (XSS) vulnerabilities in WSO2 Carbon 4.4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) setName para… |
CVE-2016-4315 | Medium | 5.7 | 2017-02-17 | Cross-site request forgery (CSRF) vulnerability in WSO2 Carbon 4.4.5 allows remote attackers to hijack the authentication of privileged users for requests that… |
CVE-2016-4314 | Medium | 4.9 | 2017-02-17 | Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arbitrary files via a… |