Known Vulnerabilities for products from Wowza

Listed below are 17 of the newest known vulnerabilities associated with the vendor "Wowza".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2021-35492 Wowza Streaming Engine through 4.8.11+5 could allow an authenticated, remote attacker to exhaust filesystem resources via the... 6.5 - MEDIUM 2021-10-05 2022-07-12
CVE-2021-35491 A Cross-Site Request Forgery (CSRF) vulnerability in Wowza Streaming Engine through 4.8.11+5 allows a remote attacker to dele... 8.1 - HIGH 2021-10-05 2021-11-06
CVE-2021-31540 Wowza Streaming Engine through 4.8.5 (in a default installation) has incorrect file permissions of configuration files in the... 7.1 - HIGH 2021-04-23 2021-12-03
CVE-2021-31539 Wowza Streaming Engine before 4.8.8.01 (in a default installation) has cleartext passwords stored in the conf/admin.password ... 5.5 - MEDIUM 2021-04-23 2021-12-08
CVE-2020-9004 A remote authenticated authorization-bypass vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any read-only us... 8.8 - HIGH 2020-04-14 2022-05-03
CVE-2019-19456 A Reflected XSS was found in the server selection box inside the login page at: enginemanager/loginfailed.html in Wowza Strea... 6.1 - MEDIUM 2020-05-18 2020-09-30
CVE-2019-19455 Wowza Streaming Engine before 4.8.5 has Insecure Permissions which may allow a local attacker to escalate privileges in / usr... 7.8 - HIGH 2020-08-03 2022-04-28
CVE-2019-19454 An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine <= 4.x.x. This issue was r... 7.5 - HIGH 2020-05-18 2020-09-30
CVE-2019-19453 Wowza Streaming Engine before 4.8.5 allows XSS (issue 1 of 2). An authenticated user, with access to the proxy license editin... 6.1 - MEDIUM 2020-08-03 2020-09-30
CVE-2019-7656 A privilege escalation vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any unprivileged Linux user to escala... 7.8 - HIGH 2020-01-29 2022-05-03
CVE-2019-7655 Wowza Streaming Engine 4.8.0 and earlier from multiple authenticated XSS vulnerabilities via the (1) customList%5B0%5D.value ... 5.4 - MEDIUM 2020-01-29 2022-10-14
CVE-2019-7654 Wowza Streaming Engine 4.8.0 and earlier suffers from multiple CSRF vulnerabilities. For example, an administrator, by follow... 6.5 - MEDIUM 2020-01-29 2022-10-14
CVE-2018-19365 The REST API in Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a rem... 7.5 - HIGH 2019-03-21 2020-09-18
CVE-2018-7049 An issue was discovered in Wowza Streaming Engine before 4.7.1. There is an XSS vulnerability in the HTTP providers (com.wowz... 6.1 - MEDIUM 2018-03-01 2020-10-01
CVE-2018-7048 An issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service (memory consumption) via a craft... 7.5 - HIGH 2018-03-01 2020-09-30
CVE-2018-7047 An issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1. The file system may be read and written ... 9.8 - CRITICAL 2018-03-01 2020-10-01
CVE-2017-16922 In com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1, traversal of the directory st... 5.3 - MEDIUM 2018-03-05 2020-09-30

Known software with vulnerabilities from Wowza

Type Vendor Product Version
ApplicationWowzaStreaming Engine4.0.0

Popular searches for "Wowza"

Live Video Streaming Platform | Wowza Media Systems

www.wowza.com

Live Video Streaming Platform | Wowza Media Systems Wowza is a live video streaming platform with industry-leading technology delivering broadcast-quality live streaming to any sized audience on any device.

www.wowzamedia.com www.wowzamedia.com/index.html wowzamedia.com Streaming media Wowza Streaming Engine Live streaming Computing platform Broadcast quality Mass media Platform game Use case Cloud computing Scalability HTTP cookie Technology Application software Website Free software Server (computing) Solution Software development kit Software Internet video