CVE-2022-39809

An issue was discovered in WSO2 Enterprise Integrator 6.4.0. A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in the Management Console under /carbon/mediation_secure_vault/properties/ajaxprocessor.jsp via the name parameter. Session hijacking or similar attacks would not be possible.
References
Link Resource
https://www.gruppotim.it/it/footer/red-team.html Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:wso2:enterprise_integrator:6.4.0:*:*:*:*:*:*:*

History

14 Sep 2022, 16:42

Type Values Removed Values Added
CPE cpe:2.3:a:wso2:enterprise_integrator:6.4.0:*:*:*:*:*:*:*
References (MISC) https://www.gruppotim.it/it/footer/red-team.html - (MISC) https://www.gruppotim.it/it/footer/red-team.html - Third Party Advisory
First Time Wso2
Wso2 enterprise Integrator
CWE CWE-79
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.1

09 Sep 2022, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-09-09 17:15

Updated : 2023-12-10 14:35


NVD link : CVE-2022-39809

Mitre link : CVE-2022-39809

CVE.ORG link : CVE-2022-39809


JSON object : View

Products Affected

wso2

  • enterprise_integrator
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')