| Package | Affected versions | Patched versions |
|---|---|---|
| api manager | = 2.1.0 | |
| app manager | = 1.2.0 | |
| application server | = 5.3.0 | |
| business process server | = 3.6.0 | |
| business rules server | = 2.2.0 | |
| complex event processor | = 4.2.0 | |
| dashboard server | = 2.0.0 | |
| data analytics server | = 3.1.0 | |
| data services server | = 3.5.1 | |
| enterprise integrator | = 6.1.1 | |
| enterprise mobility manager | = 2.2.0 | |
| governance registry | = 5.4.0 | |
| identity server | = 5.3.0 | |
| iot server | = 3.0.0 | |
| machine learner | = 1.2.0 | |
| message broker | = 3.2.0 | |
| storage server | = 1.5.0 |
WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free