CVE-2017-14651

PoC ×2—

CVSS 3.1

4.8 medium

EPSS

4%p90

Published

Sep 21, 2017 (Sep 21, 2017)

Modified

Jun 17, 2026

Description

WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter.

Vendors: wso2
Products: api manager, app manager, application server, business process server, business rules server, complex event processor, dashboard server, data analytics server, data services server, enterprise integrator, enterprise mobility manager, governance registry
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (3.8%)

In the news0 stories

No ingested article mentions this CVE yet.