CVE-2018-8716

WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers

published April 25, 2018

CVSS
—
EPSS
38%
Percentile
98.6
In the wild
Unconfirmed
What it is

WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.38106 · 98.6th percentile
Published
2018-04-25T20:00Z
EPSS history
Timeline
  • 22 SEP 03:16Z
    EPSS moved 39% → 23%
    epss
  • 06 SEP 03:12Z
    EPSS moved 39% → 23%
    epss
  • 30 AUG 16:01Z
    EPSS moved 24% → 39%
    epss
  • 29 AUG 04:43Z
    EPSS moved 39% → 24%
    epss
  • 25 APR 20:00Z
    WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers
    cvelistv5