EDB-40239

functional

WSO2 Identity Server 5.1.0 - Multiple Vulnerabilities

view exploit source exploit_dbverifiedtype webappsauthor hyp3rlinxpublished 2016-08-16catalog exploit_db
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2016-4312UShigh7.5Exploit
XML external entity (XXE) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 before WSO2-CARBON-PATCH-4.4.0-0231 allows remote authenticated users with access to…
CVE-2016-4311UShigh8.8Exploit
Cross-site request forgery (CSRF) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack the authentication of privileged users for…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan