CVE-2019-7655 describes multiple authenticated Cross-Site Scripting (XSS) vulnerabilities affecting Wowza Streaming Engine versions 4.8.0 and earlier. These flaws, specifically CWE-79, could be triggered via the customList%5B0%5D.value field in the server setup or the host field in the login form. With a CVSS score of 5.4 (Medium), exploitation requires authenticated access and user interaction, potentially leading to low impact on confidentiality and integrity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability, which was resolved in Wowza Streaming Engine 4.8.5.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 4.8.0CPE matchmatch criteria | cpe:2.3:a:wowza:streaming_engine:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.