cveboard RSS feed

CVE-2024-8008

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2024
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Reflected Cross-Site Scripting (XSS) in Multiple WSO2 Products via JDBC User Store Connection Validation

A reflected cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to insufficient output encoding in error messages generated by the JDBC user store connection validation request. A malicious actor can inject a specially crafted payload into the request, causing the browser to execute arbitrary JavaScript in the context of the vulnerable page. This vulnerability may allow UI manipulation, redirection to malicious websites, or data exfiltration from the browser. However, since all session-related sensitive cookies are protected with the httpOnly flag, session hijacking is not possible.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

WSO2 Enterprise Integrator

Vendor
WSO2
Product
WSO2 Enterprise Integrator
Platforms
Unknown
Default status
unaffected
WSO2 Enterprise Integrator · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom6.6.0UnavailableNone listed
6.6.0affectedcustom6.6.0.211UnavailableNone listed

WSO2 API Manager

Vendor
WSO2
Product
WSO2 API Manager
Platforms
Unknown
Default status
unaffected
WSO2 API Manager · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom3.1.0UnavailableNone listed
3.1.0affectedcustom3.1.0.305UnavailableNone listed
3.2.0affectedcustom3.2.0.396UnavailableNone listed
3.2.1affectedcustom3.2.1.28UnavailableNone listed
4.0.0affectedcustom4.0.0.313UnavailableNone listed
4.1.0affectedcustom4.1.0.182UnavailableNone listed
4.2.0affectedcustom4.2.0.121UnavailableNone listed
4.3.0affectedcustom4.3.0.32UnavailableNone listed
4.4.0affectedcustom4.4.0.1UnavailableNone listed
4.5.0affectedcustom4.5.0.16UnavailableNone listed

WSO2 Identity Server as Key Manager

Vendor
WSO2
Product
WSO2 Identity Server as Key Manager
Platforms
Unknown
Default status
unaffected
WSO2 Identity Server as Key Manager · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom5.10.0UnavailableNone listed
5.10.0affectedcustom5.10.0.321UnavailableNone listed

WSO2 Identity Server

Vendor
WSO2
Product
WSO2 Identity Server
Platforms
Unknown
Default status
unaffected
WSO2 Identity Server · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom5.10.0UnavailableNone listed
5.10.0affectedcustom5.10.0.328UnavailableNone listed
5.11.0affectedcustom5.11.0.374UnavailableNone listed
6.0.0affectedcustom6.0.0.216UnavailableNone listed
6.1.0affectedcustom6.1.0.201UnavailableNone listed
7.0.0affectedcustom7.0.0.69UnavailableNone listed

WSO2 Open Banking IAM

Vendor
WSO2
Product
WSO2 Open Banking IAM
Platforms
Unknown
Default status
unaffected
WSO2 Open Banking IAM · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom2.0.0UnavailableNone listed
2.0.0affectedcustom2.0.0.374UnavailableNone listed

WSO2 Open Banking AM

Vendor
WSO2
Product
WSO2 Open Banking AM
Platforms
Unknown
Default status
unaffected
WSO2 Open Banking AM · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom2.0.0UnavailableNone listed
2.0.0affectedcustom2.0.0.354UnavailableNone listed

WSO2 Traffic Manager

Vendor
WSO2
Product
WSO2 Traffic Manager
Platforms
Unknown
Default status
unaffected
WSO2 Traffic Manager · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.5.0affectedcustom4.5.0.16UnavailableNone listed

WSO2 API Control Plane

Vendor
WSO2
Product
WSO2 API Control Plane
Platforms
Unknown
Default status
unaffected
WSO2 API Control Plane · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.5.0affectedcustom4.5.0.17UnavailableNone listed

WSO2 Universal Gateway

Vendor
WSO2
Product
WSO2 Universal Gateway
Platforms
Unknown
Default status
unaffected
WSO2 Universal Gateway · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.5.0affectedcustom4.5.0.16UnavailableNone listed

WSO2 Carbon Identity User Store Configuration UI

Vendor
WSO2
Product
WSO2 Carbon Identity User Store Configuration UI
Platforms
Unknown
Default status
unknown
Package
org.wso2.carbon.identity.framework:org.wso2.carbon.identity.user.store.configuration.ui
WSO2 Carbon Identity User Store Configuration UI · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
5.14.127affectedcustom5.14.127.9UnavailableNone listed
5.17.5affectedcustom5.17.5.289UnavailableNone listed
5.17.118affectedcustom5.17.118.10UnavailableNone listed
5.18.187affectedcustom5.18.187.276UnavailableNone listed
5.18.248affectedcustom5.18.248.22UnavailableNone listed
5.23.8affectedcustom5.23.8.193UnavailableNone listed
5.24.8affectedcustom5.24.8.11UnavailableNone listed
5.25.92affectedcustom5.25.92.104UnavailableNone listed
5.25.705affectedcustom5.25.705.10UnavailableNone listed
5.25.713affectedcustom5.25.713.1UnavailableNone listed
5.25.724affectedcustom5.25.724.1UnavailableNone listed
7.0.78affectedcustom7.0.78.46UnavailableNone listed
5.25.725unaffectedcustomUnavailable5.25.*None listed
5.27.0unaffectedcustomUnavailable5.27.*None listed
7.5.12unaffectedcustomUnavailable*None listed