Known Vulnerabilities for products from Wowza
Listed below are 17 of the newest known vulnerabilities associated with the vendor "Wowza".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-35492 json | Wowza Streaming Engine through 4.8.11+5 could allow an authenticated, remote attacker to exhaust filesystem resources via the... | 6.5 - MEDIUM | 2021-10-05 | 2022-07-12 |
| CVE-2021-35491 json | A Cross-Site Request Forgery (CSRF) vulnerability in Wowza Streaming Engine through 4.8.11+5 allows a remote attacker to dele... | 8.1 - HIGH | 2021-10-05 | 2021-11-06 |
| CVE-2021-31540 json | Wowza Streaming Engine through 4.8.5 (in a default installation) has incorrect file permissions of configuration files in the... | 7.1 - HIGH | 2021-04-23 | 2021-12-03 |
| CVE-2021-31539 json | Wowza Streaming Engine before 4.8.8.01 (in a default installation) has cleartext passwords stored in the conf/admin.password ... | 5.5 - MEDIUM | 2021-04-23 | 2021-12-08 |
| CVE-2020-9004 json | A remote authenticated authorization-bypass vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any read-only us... | 8.8 - HIGH | 2020-04-14 | 2022-05-03 |
| CVE-2019-19456 json | A Reflected XSS was found in the server selection box inside the login page at: enginemanager/loginfailed.html in Wowza Strea... | 6.1 - MEDIUM | 2020-05-18 | 2020-09-30 |
| CVE-2019-19455 json | Wowza Streaming Engine before 4.8.5 has Insecure Permissions which may allow a local attacker to escalate privileges in / usr... | 7.8 - HIGH | 2020-08-03 | 2022-04-28 |
| CVE-2019-19454 json | An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine <= 4.x.x. This issue was r... | 7.5 - HIGH | 2020-05-18 | 2020-09-30 |
| CVE-2019-19453 json | Wowza Streaming Engine before 4.8.5 allows XSS (issue 1 of 2). An authenticated user, with access to the proxy license editin... | 5.4 - MEDIUM | 2020-08-03 | 2023-02-10 |
| CVE-2019-7656 json | A privilege escalation vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any unprivileged Linux user to escala... | 7.8 - HIGH | 2020-01-29 | 2022-05-03 |
| CVE-2019-7655 json | Wowza Streaming Engine 4.8.0 and earlier from multiple authenticated XSS vulnerabilities via the (1) customList%5B0%5D.value ... | 5.4 - MEDIUM | 2020-01-29 | 2022-10-14 |
| CVE-2019-7654 json | Wowza Streaming Engine 4.8.0 and earlier suffers from multiple CSRF vulnerabilities. For example, an administrator, by follow... | 6.5 - MEDIUM | 2020-01-29 | 2022-10-14 |
| CVE-2018-19365 json | The REST API in Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a rem... | 9.1 - CRITICAL | 2019-03-21 | 2023-01-20 |
| CVE-2018-7049 json | An issue was discovered in Wowza Streaming Engine before 4.7.1. There is an XSS vulnerability in the HTTP providers (com.wowz... | 6.1 - MEDIUM | 2018-03-01 | 2020-10-01 |
| CVE-2018-7048 json | An issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service (memory consumption) via a craft... | 7.5 - HIGH | 2018-03-01 | 2020-09-30 |
| CVE-2018-7047 json | An issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1. The file system may be read and written ... | 9.8 - CRITICAL | 2018-03-01 | 2020-10-01 |
| CVE-2017-16922 json | In com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1, traversal of the directory st... | 5.3 - MEDIUM | 2018-03-05 | 2020-09-30 |
Known software with vulnerabilities from Wowza
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Wowza | Streaming Engine | 4.0.0 |