CVE-2017-14995

—

CVSS 3.0

6.1 medium

EPSS

<1%p48

Published

Oct 4, 2017 (Oct 4, 2017)

Modified

Jun 17, 2026

Description

The Management Console in WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2 Business Rules Server 2.2.0, WSO2 Complex Event Processor 4.2.0, WSO2 Dashboard Server 2.0.0, WSO2 Data Analytics Server 3.1.0, WSO2 Data Services Server 3.5.1, and WSO2 Machine Learner 1.2.0 is affected by stored XSS.

Vendors: wso2
Products: application server, business process server, business rules server, complex event processor, dashboard server, data analytics server, data services server, machine learner
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.