Known Vulnerabilities for Streaming Engine by Wowza
Listed below are 10 of the newest known vulnerabilities associated with "Streaming Engine" by "Wowza".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-54236 json | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, the fix for CVE-2026-22778, whi... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2021-35492 json | Wowza Streaming Engine through 4.8.11+5 could allow an authenticated, remote attacker to exhaust filesystem resources via the... | 6.5 - MEDIUM | 2021-10-05 | 2022-07-12 |
| CVE-2021-35491 json | A Cross-Site Request Forgery (CSRF) vulnerability in Wowza Streaming Engine through 4.8.11+5 allows a remote attacker to dele... | 8.1 - HIGH | 2021-10-05 | 2021-11-06 |
| CVE-2021-31540 json | Wowza Streaming Engine through 4.8.5 (in a default installation) has incorrect file permissions of configuration files in the... | 7.1 - HIGH | 2021-04-23 | 2021-12-03 |
| CVE-2021-31539 json | Wowza Streaming Engine before 4.8.8.01 (in a default installation) has cleartext passwords stored in the conf/admin.password ... | 5.5 - MEDIUM | 2021-04-23 | 2021-12-08 |
| CVE-2020-9004 json | A remote authenticated authorization-bypass vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any read-only us... | 8.8 - HIGH | 2020-04-14 | 2022-05-03 |
| CVE-2019-19456 json | A Reflected XSS was found in the server selection box inside the login page at: enginemanager/loginfailed.html in Wowza Strea... | 6.1 - MEDIUM | 2020-05-18 | 2020-09-30 |
| CVE-2019-19455 json | Wowza Streaming Engine before 4.8.5 has Insecure Permissions which may allow a local attacker to escalate privileges in / usr... | 7.8 - HIGH | 2020-08-03 | 2022-04-28 |
| CVE-2019-19454 json | An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine <= 4.x.x. This issue was r... | 7.5 - HIGH | 2020-05-18 | 2020-09-30 |
| CVE-2019-19453 json | Wowza Streaming Engine before 4.8.5 allows XSS (issue 1 of 2). An authenticated user, with access to the proxy license editin... | 5.4 - MEDIUM | 2020-08-03 | 2023-02-10 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Wowza | Streaming Engine | 4.8.5 | |||
| Application | Wowza | Streaming Engine | 4.8.0 | |||
| Application | Wowza | Streaming Engine | 4.7.8 | |||
| Application | Wowza | Streaming Engine | 4.7.7 | |||
| Application | Wowza | Streaming Engine | 4.7.6 | |||
| Application | Wowza | Streaming Engine | 4.7.5 | |||
| Application | Wowza | Streaming Engine | 4.7.4.0.1 | |||
| Application | Wowza | Streaming Engine | 4.7.4 | |||
| Application | Wowza | Streaming Engine | 4.7.3 | |||
| Application | Wowza | Streaming Engine | 4.7.1 | |||
| Application | Wowza | Streaming Engine | 4.7.0 | |||
| Application | Wowza | Streaming Engine | 4.6.0 | |||
| Application | Wowza | Streaming Engine | 4.5.0 | |||
| Application | Wowza | Streaming Engine | 4.4.1 | |||
| Application | Wowza | Streaming Engine | 4.4.0 | |||
| Application | Wowza | Streaming Engine | 4.3.0 | |||
| Application | Wowza | Streaming Engine | 4.2.0 | |||
| Application | Wowza | Streaming Engine | 4.1.2 | |||
| Application | Wowza | Streaming Engine | 4.1.1 | |||
| Application | Wowza | Streaming Engine | 4.1.0 |