Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2018-7049 1 Wowza 1 Streaming Engine 2024-11-21 N/A
An issue was discovered in Wowza Streaming Engine before 4.7.1. There is an XSS vulnerability in the HTTP providers (com.wowza.wms.http.HTTPProviderMediaList and com.wowza.wms.http.streammanager.HTTPStreamManager) causing script injection and/or reflection via a crafted HTTP request.
CVE-2018-7048 1 Wowza 1 Streaming Engine 2024-11-21 N/A
An issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service (memory consumption) via a crafted HTTP request.
CVE-2018-7047 1 Wowza 1 Streaming Engine 2024-11-21 N/A
An issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1. The file system may be read and written to via JMX using the default JMX credentials (remote code execution may be possible as well).