← Back

Message Broker

message_broker

Vendor: Wso2 • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-6911
1Wso2
9Api Manager
Api Manager AnalyticsApi Microgateway+6 more
Jun 17, 2026
Dec 18, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can be carried out by an attacker injecting a malicious payload into the Registry feat...Show more
Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can be carried out by an attacker injecting a malicious payload into the Registry feature of the Management Console. Show less
CVE-2017-14651
1Wso2
17Api Manager
App ManagerApplication Server+14 more
May 13, 2026
Sep 21, 2017
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter.