CVE-2017-14995

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-10-04 · updated 2026-06-17
Weakness: CWE-79

Description

The Management Console in WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2 Business Rules Server 2.2.0, WSO2 Complex Event Processor 4.2.0, WSO2 Dashboard Server 2.0.0, WSO2 Data Analytics Server 3.1.0, WSO2 Data Services Server 3.5.1, and WSO2 Machine Learner 1.2.0 is affected by stored XSS.

Affected products

WSO2 Application Server: 5.3.0
WSO2 Business Process Server: 3.6.0
WSO2 Business Rules Server: 2.2.0
WSO2 Complex Event Processor: 4.2.0
WSO2 Dashboard Server: 2.0.0
WSO2 Data Analytics Server: 3.1.0
WSO2 Data Services Server: 3.5.1
WSO2 Machine Learner: 1.2.0

References

https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2017-0257
https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2017-0257

Get alerted when CVE-2017-14995 or the next vulnerability affects your stack