Skip to content
Noroxi

Wowza records

26 published records for vendor wowza.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
19.2%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 24
  6. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

26 records
  • CVE-2018-19365
    43Plan

    The REST API in Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a remote, specifical

    CriticalCVSS 9.1Proof of conceptEPSS 22%

    wowza · streaming engineMar 21, 2019

  • CVE-2018-7047
    40Plan

    An issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1.

    CriticalCVSS 9.8No exploitEPSS 2%

    wowza · streaming engineMar 1, 2018

  • CVE-2024-52052
    37Monitor

    Stream Target Remote Code Execution in Wowza Streaming Engine

    CriticalCVSS 9.4No exploitEPSS 0%

    wowza · streaming engineNov 21, 2024

  • CVE-2020-9004
    36Monitor

    A remote authenticated authorization-bypass vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any read-only user to issue req

    HighCVSS 8.8No exploitEPSS 3%

    wowza · streaming engineApr 14, 2020

  • CVE-2024-52053
    34Monitor

    Stored Cross-Site Scripting in Wowza Streaming Engine

    HighCVSS 8.7No exploitEPSS 0%

    wowza · streaming engineNov 21, 2024

  • CVE-2016-20033
    34Monitor

    Wowza Streaming Engine 4.5.0 Local Privilege Escalation via nssm_x64.exe

    HighCVSS 8.5No exploitEPSS 0%

    wowza · streaming engineMar 16, 2026

  • CVE-2016-20034
    34Monitor

    Wowza Streaming Engine 4.5.0 Privilege Escalation via user edit

    HighCVSS 8.7No exploitEPSS 0%

    wowza · streaming engineMar 16, 2026

  • CVE-2024-52055
    32Monitor

    Application Copy Path Traversal in Wowza Streaming Engine

    HighCVSS 8.2No exploitEPSS 0%

    wowza · streaming engineNov 21, 2024

  • CVE-2021-35491
    32Monitor

    A Cross-Site Request Forgery (CSRF) vulnerability in Wowza Streaming Engine through 4.8.11+5 allows a remote attacker to delete a user accou

    HighCVSS 8.1No exploitEPSS 0%

    wowza · streaming engineOct 5, 2021

  • CVE-2019-7656
    31Monitor

    A privilege escalation vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any unprivileged Linux user to escalate privileges t

    HighCVSS 7.8No exploitEPSS 0%

    wowza · streaming engineJan 29, 2020

  • CVE-2019-19455
    31Monitor

    Wowza Streaming Engine before 4.8.5 has Insecure Permissions which may allow a local attacker to escalate privileges in / usr / local / Wowz

    HighCVSS 7.8No exploitEPSS 0%

    wowza · streaming engineAug 3, 2020

  • CVE-2019-19454
    30Monitor

    An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine <= 4.x.x.

    HighCVSS 7.5No exploitEPSS 1%

    wowza · streaming engineMay 18, 2020

  • CVE-2018-7048
    30Monitor

    An issue was discovered in Wowza Streaming Engine before 4.7.1.

    HighCVSS 7.5No exploitEPSS 1%

    wowza · streaming engineMar 1, 2018

  • CVE-2021-31540
    28Monitor

    Wowza Streaming Engine through 4.8.5 (in a default installation) has incorrect file permissions of configuration files in the conf/ director

    HighCVSS 7.1No exploitEPSS 0%

    wowza · streaming engineApr 23, 2021

  • CVE-2021-35492
    27Monitor

    Wowza Streaming Engine through 4.8.11+5 could allow an authenticated, remote attacker to exhaust filesystem resources via the /enginemanager

    MediumCVSS 6.5Proof of conceptEPSS 3%

    wowza · streaming engineOct 5, 2021

  • CVE-2024-52056
    27Monitor

    Application Delete Path Traversal in Wowza Streaming Engine

    MediumCVSS 6.9No exploitEPSS 0%

    wowza · streaming engineNov 21, 2024

  • CVE-2016-20035
    27Monitor

    Wowza Streaming Engine 4.5.0 CSRF via user edit endpoint

    MediumCVSS 6.9No exploitEPSS 0%

    wowza · streaming engineMar 16, 2026

  • CVE-2019-7654
    26Monitor

    Wowza Streaming Engine 4.8.0 and earlier suffers from multiple CSRF vulnerabilities.

    MediumCVSS 6.5No exploitEPSS 0%

    wowza · streaming engineJan 29, 2020

  • CVE-2019-19456
    24Monitor

    A Reflected XSS was found in the server selection box inside the login page at: enginemanager/loginfailed.html in Wowza Streaming Engine <=

    MediumCVSS 6.1No exploitEPSS 0%

    wowza · streaming engineMay 18, 2020

  • CVE-2018-7049
    24Monitor

    An issue was discovered in Wowza Streaming Engine before 4.7.1.

    MediumCVSS 6.1No exploitEPSS 0%

    wowza · streaming engineMar 1, 2018

  • CVE-2021-31539
    22Monitor

    Wowza Streaming Engine before 4.8.8.01 (in a default installation) has cleartext passwords stored in the conf/admin.password file.

    MediumCVSS 5.5No exploitEPSS 0%

    wowza · streaming engineApr 23, 2021

  • CVE-2017-16922
    21Monitor

    In com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1, traversal of the directory structure and ret

    MediumCVSS 5.3No exploitEPSS 1%

    wowza · streaming engineMar 5, 2018

  • CVE-2019-7655
    21Monitor

    Wowza Streaming Engine 4.8.0 and earlier from multiple authenticated XSS vulnerabilities via the (1) customList%5B0%5D.value field in engine

    MediumCVSS 5.4No exploitEPSS 0%

    wowza · streaming engineJan 29, 2020

  • CVE-2019-19453
    21Monitor

    Wowza Streaming Engine before 4.8.5 allows XSS (issue 1 of 2).

    MediumCVSS 5.4No exploitEPSS 0%

    wowza · streaming engineAug 3, 2020

  • CVE-2024-52054
    20Monitor

    Application Creation Path Traversal in Wowza Streaming Engine

    MediumCVSS 5.1No exploitEPSS 0%

    wowza · streaming engineNov 21, 2024