BDU:2022-02512
Scores
EPSS Score
0.0000
CVSS
3.x 9.8
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
All CVSS Scores
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Уязвимость платформы для интеграции интерфейсов прикладного программирования, приложений и веб-служб WSO2 связана с возможностью загрузки произвольного JSP-файла на сервер. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код
Sources
Related Vulnerabilities
Reference Links
Vulnerable Software
Type: Configuration
Vendor: wso2
Product: wso2 api manager
Operating System: * *
{
"version_end_including": "4.0.0",
"version_start_including": "2.2.0"
}Source: bdu
Type: Configuration
Vendor: wso2
Product: wso2 enterprise integrator
Operating System: * *
{
"version_end_including": "6.6.0",
"version_start_including": "6.2.0"
}Source: bdu
Type: Configuration
Vendor: wso2
Product: wso2 identity server
Operating System: * *
{
"version_end_including": "5.11.0",
"version_start_including": "5.2.0"
}Source: bdu
Type: Configuration
Vendor: wso2
Product: wso2 identity server analytics
Operating System: * *
{
"version_exact": "5.4.0"
}Source: bdu
Type: Configuration
Vendor: wso2
Product: wso2 identity server analytics
Operating System: * *
{
"version_exact": "5.4.1"
}Source: bdu
Type: Configuration
Vendor: wso2
Product: wso2 identity server analytics
Operating System: * *
{
"version_exact": "5.5.0"
}Source: bdu
Type: Configuration
Vendor: wso2
Product: wso2 identity server analytics
Operating System: * *
{
"version_exact": "5.6.0"
}Source: bdu
Type: Configuration
Vendor: wso2
Product: wso2 identity server as key manager
Operating System: * *
{
"version_end_including": "5.10.0",
"version_start_including": "5.3.0"
}Source: bdu