Vulnerabilities (CVE)

Filtered by vendor Wowza Subscribe
Total 22 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-16922 1 Wowza 1 Streaming Engine 2020-09-30 5.0 MEDIUM 5.3 MEDIUM
In com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1, traversal of the directory structure and retrieval of a file are possible via a remote, specifically crafted HTTP request.
CVE-2019-19456 1 Wowza 1 Streaming Engine 2020-09-30 4.3 MEDIUM 6.1 MEDIUM
A Reflected XSS was found in the server selection box inside the login page at: enginemanager/loginfailed.html in Wowza Streaming Engine <= 4.x.x. This issue was resolved in Wowza Streaming Engine 4.8.0.