Total vulnerabilities in the database
WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter.
| Software | From | Fixed in |
|---|---|---|
| wso2 / storage_server | 1.5.0 | 1.5.0.x |
| wso2 / message_broker | 3.2.0 | 3.2.0.x |
| wso2 / machine_learner | 1.2.0 | 1.2.0.x |
| wso2 / iot_server | 3.0.0 | 3.0.0.x |
| wso2 / identity_server | 5.3.0 | 5.3.0.x |
| wso2 / governance_registry | 5.4.0 | 5.4.0.x |
| wso2 / enterprise_mobility_manager | 2.2.0 | 2.2.0.x |
| wso2 / enterprise_integrator | 6.1.1 | 6.1.1.x |
| wso2 / data_services_server | 3.5.1 | 3.5.1.x |
| wso2 / dashboard_server | 2.0.0 | 2.0.0.x |
| wso2 / complex_event_processor | 4.2.0 | 4.2.0.x |
| wso2 / business_rules_server | 2.2.0 | 2.2.0.x |
| wso2 / business_process_server | 3.6.0 | 3.6.0.x |
| wso2 / application_server | 5.3.0 | 5.3.0.x |
| wso2 / app_manager | 1.2.0 | 1.2.0.x |
| wso2 / api_manager | 2.1.0 | 2.1.0.x |
| wso2 / data_analytics_server | 3.1.0 | 3.1.0.x |