WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/addcollectionajaxprocessor.jsp via the collectionName or parentPath parameter.
{
"unresolved_ranges": [
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:a:wso2:app_manager:1.2.0:*:*:*:*:*:*:*"
],
"vendor_product": "wso2:app_manager",
"extracted_events": [
{
"introduced": "1.2.0"
},
{
"last_affected": "1.2.0"
}
]
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:a:wso2:application_server:5.3.0:*:*:*:*:*:*:*"
],
"vendor_product": "wso2:application_server",
"extracted_events": [
{
"introduced": "5.3.0"
},
{
"last_affected": "5.3.0"
}
]
},
{
"extracted_events": [
{
"introduced": "3.6.0"
},
{
"last_affected": "3.6.0"
}
],
"cpes": [
"cpe:2.3:a:wso2:business_process_server:3.6.0:*:*:*:*:*:*:*"
],
"vendor_product": "wso2:business_process_server",
"source": "CPE_STRING"
},
{
"extracted_events": [
{
"introduced": "2.2.0"
},
{
"last_affected": "2.2.0"
}
],
"cpes": [
"cpe:2.3:a:wso2:business_rules_server:2.2.0:*:*:*:*:*:*:*"
],
"vendor_product": "wso2:business_rules_server",
"source": "CPE_STRING"
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:a:wso2:complex_event_processor:4.2.0:*:*:*:*:*:*:*"
],
"vendor_product": "wso2:complex_event_processor",
"extracted_events": [
{
"introduced": "4.2.0"
},
{
"last_affected": "4.2.0"
}
]
},
{
"extracted_events": [
{
"introduced": "2.0.0"
},
{
"last_affected": "2.0.0"
}
],
"cpes": [
"cpe:2.3:a:wso2:dashboard_server:2.0.0:*:*:*:*:*:*:*"
],
"vendor_product": "wso2:dashboard_server",
"source": "CPE_STRING"
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:a:wso2:data_analytics_server:3.1.0:*:*:*:*:*:*:*"
],
"vendor_product": "wso2:data_analytics_server",
"extracted_events": [
{
"introduced": "3.1.0"
},
{
"last_affected": "3.1.0"
}
]
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:a:wso2:data_services_server:3.5.1:*:*:*:*:*:*:*"
],
"vendor_product": "wso2:data_services_server",
"extracted_events": [
{
"introduced": "3.5.1"
},
{
"last_affected": "3.5.1"
}
]
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:a:wso2:enterprise_mobility_manager:2.2.0:*:*:*:*:*:*:*"
],
"vendor_product": "wso2:enterprise_mobility_manager",
"extracted_events": [
{
"introduced": "2.2.0"
},
{
"last_affected": "2.2.0"
}
]
},
{
"extracted_events": [
{
"introduced": "5.4.0"
},
{
"last_affected": "5.4.0"
}
],
"cpes": [
"cpe:2.3:a:wso2:governance_registry:5.4.0:*:*:*:*:*:*:*"
],
"vendor_product": "wso2:governance_registry",
"source": "CPE_STRING"
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:a:wso2:identity_server:5.3.0:*:*:*:*:*:*:*"
],
"vendor_product": "wso2:identity_server",
"extracted_events": [
{
"introduced": "5.3.0"
},
{
"last_affected": "5.3.0"
}
]
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:a:wso2:iot_server:3.0.0:*:*:*:*:*:*:*"
],
"vendor_product": "wso2:iot_server",
"extracted_events": [
{
"introduced": "3.0.0"
},
{
"last_affected": "3.0.0"
}
]
},
{
"extracted_events": [
{
"introduced": "1.2.0"
},
{
"last_affected": "1.2.0"
}
],
"cpes": [
"cpe:2.3:a:wso2:machine_learner:1.2.0:*:*:*:*:*:*:*"
],
"vendor_product": "wso2:machine_learner",
"source": "CPE_STRING"
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:a:wso2:message_broker:3.2.0:*:*:*:*:*:*:*"
],
"vendor_product": "wso2:message_broker",
"extracted_events": [
{
"introduced": "3.2.0"
},
{
"last_affected": "3.2.0"
}
]
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:a:wso2:storage_server:1.5.0:*:*:*:*:*:*:*"
],
"vendor_product": "wso2:storage_server",
"extracted_events": [
{
"introduced": "1.5.0"
},
{
"last_affected": "1.5.0"
}
]
}
]
}