wowza streaming engine

Name: wowza streaming engine
Brand: wowza

productUS

cpe:2.3:a:wowza:streaming_engine:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical9high11medium1low

updated 2026-10-28

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-35492US	medium6.5	3.34% (89th)	Exploit	no fix	2021-10-05	≤ 4.8.11
CVE-2018-19365US	critical9.1	22.3% (98th)	—	no fix	2019-03-21	= 4.7.4.0.1
CVE-2020-9004US	high8.8OT elevated	3.53% (89th)	—	no fix	2020-04-14	≤ 4.8.0
CVE-2018-7047US	critical9.8OT elevated	2.31% (83rd)	—	4.7.1	2018-03-01	< 4.7.1
CVE-2019-19454US	high7.5OT elevated	1.55% (75th)	—	no fix	2020-05-18	4.0.0 → 4.8.0
CVE-2018-7048US	high7.5	1.49% (74th)	—	4.7.1	2018-03-01	< 4.7.1
CVE-2017-16922US	medium5.3	1.42% (73rd)	—	4.7.1	2018-03-05	< 4.7.1
CVE-2019-19456US	medium6.1	1.00% (63rd)	—	no fix	2020-05-18	4.0.0 → 4.8.0
CVE-2024-52055US	medium4.9	1.00% (63rd)	—	4.9.1	2024-11-21	4.3.0 → 4.9.1
CVE-2019-7655US	medium5.4	0.95% (61st)	—	no fix	2020-01-29	≤ 4.8.0
CVE-2021-35491US	high8.1	0.88% (59th)	—	4.8.14	2021-10-05	< 4.8.14
CVE-2018-7049US	medium6.1	0.88% (59th)	—	4.7.1	2018-03-01	< 4.7.1
CVE-2019-7654US	medium6.5	0.85% (58th)	—	no fix	2020-01-29	≤ 4.8.0
CVE-2019-19453US	medium5.4	0.81% (57th)	—	4.8.5	2020-08-03	< 4.8.5
CVE-2024-52054US	low2.7	0.75% (55th)	—	4.9.1	2024-11-21	4.3.0 → 4.9.1
CVE-2024-52056US	medium6.5	0.71% (53rd)	—	4.9.1	2024-11-21	4.3.0 → 4.9.1
CVE-2024-52053US	critical9.6	0.66% (52nd)	—	4.9.1	2024-11-21	4.3.0 → 4.9.1
CVE-2024-52052US	high7.2	0.50% (42nd)	—	4.9.1	2024-11-21	4.3.0 → 4.9.1
CVE-2019-7656US	high7.8OT elevated	0.45% (39th)	—	no fix	2020-01-29	≤ 4.8.0
CVE-2021-31540US	high7.1	0.39% (33rd)	—	no fix	2021-04-23	≤ 4.8.5
CVE-2019-19455US	high7.8	0.37% (31st)	—	4.8.5	2020-08-03	< 4.8.5
CVE-2021-31539US	medium5.5OT elevated	0.30% (22nd)	—	4.8.8.01	2021-04-23	< 4.8.8.01
CVE-2016-20036US	—	0.24% (16th)	—	no fix	2026-03-16	= 4.5.0
CVE-2016-20034US	high8.0	0.21% (11th)	—	no fix	2026-03-16	= 4.5.0
CVE-2016-20033US	—	0.21% (11th)	—	no fix	2026-03-16	= 4.5.0
CVE-2016-20035US	medium4.3	0.16% (5th)	—	no fix	2026-03-16	= 4.5.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5 CVEs
CWE-352Cross-Site Request Forgery (CSRF)4 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource3 CVEs
CWE-276Incorrect Default Permissions2 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-312Cleartext Storage of Sensitive Information1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan