Skip to content

Wowza vulnerabilities

Products

Streaming Engine 26
Streaming Engine 6

Newest

wowza streaming engine Wowza Streaming Engine before 4.12.2 processes XML external entities, which allows remote... CVE-2026-123029 7.5 HighNovember 5, 2026
wowza streaming engine Wowza Streaming Engine 4.5.0 Multiple Cross-Site Scripting Vulnerabilities CVE-2016-20036 5.1 MediumMarch 15, 2026
wowza streaming engine Wowza Streaming Engine 4.5.0 CSRF via user edit endpoint CVE-2016-20035 6.9 MediumMarch 15, 2026
wowza streaming engine Wowza Streaming Engine 4.5.0 Privilege Escalation via user edit CVE-2016-20034 8.7 HighMarch 15, 2026
wowza streaming engine Wowza Streaming Engine 4.5.0 Local Privilege Escalation via nssm_x64.exe CVE-2016-20033 8.5 HighMarch 15, 2026
wowza streaming engine Application Delete Path Traversal in Wowza Streaming Engine CVE-2024-52056 6.9 MediumNovember 21, 2024
wowza streaming engine Application Copy Path Traversal in Wowza Streaming Engine CVE-2024-52055 8.2 HighNovember 21, 2024
wowza streaming engine Application Creation Path Traversal in Wowza Streaming Engine CVE-2024-52054 5.1 MediumNovember 21, 2024
wowza streaming engine Stored Cross-Site Scripting in Wowza Streaming Engine CVE-2024-52053 8.7 HighNovember 21, 2024
wowza streaming engine Stream Target Remote Code Execution in Wowza Streaming Engine CVE-2024-52052 9.4 CriticalNovember 21, 2024
wowza streaming engine Wowza Streaming Engine through 4.8.11+5 could allow an authenticated, remote attacker to exhaust... CVE-2021-35492 Public exploit 6.5 MediumOctober 5, 2021
wowza streaming engine A Cross-Site Request Forgery (CSRF) vulnerability in Wowza Streaming Engine through 4.8.11+5... CVE-2021-35491 8.1 HighOctober 5, 2021
wowza streaming engine Wowza Streaming Engine through 4.8.5 (in a default installation) has cleartext passwords stored... CVE-2021-31539 5.5 MediumApril 23, 2021
wowza streaming engine Wowza Streaming Engine through 4.8.5 (in a default installation) has incorrect file permissions... CVE-2021-31540 7.1 HighApril 23, 2021
wowza streaming engine Wowza Streaming Engine through 2019-11-28 has Insecure Permissions. CVE-2019-19455 7.8 HighAugust 3, 2020
wowza streaming engine Wowza Streaming Engine through 2019-11-28 allows XSS (issue 1 of 2). CVE-2019-19453 5.4 MediumAugust 3, 2020
wowza streaming engine A Reflected XSS was found in the server selection box inside the login page at: enginemanager... CVE-2019-19456 6.1 MediumMay 18, 2020
wowza streaming engine An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming... CVE-2019-19454 7.5 HighMay 18, 2020
wowza streaming engine A remote authenticated authorization-bypass vulnerability in Wowza Streaming Engine 4.7.8 (build... CVE-2020-9004 8.8 HighApril 14, 2020
wowza streaming engine Wowza Streaming Engine 4.7.7 and 4.7.8 suffers from multiple authenticated XSS vulnerabilities... CVE-2019-7655 5.4 MediumJanuary 29, 2020
wowza streaming engine A privilege escalation vulnerability in Wowza Streaming Engine 4.7.7 and 4.7.8 allows any... CVE-2019-7656 7.8 HighJanuary 29, 2020
wowza streaming engine Wowza Streaming Engine 4.7.7 and 4.7.8 suffers from multiple CSRF vulnerabilities. For example,... CVE-2019-7654 6.5 MediumJanuary 29, 2020
wowza streaming engine The REST API in Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and... CVE-2018-19365 EPSS 22.3% 9.1 CriticalMarch 18, 2019
wowza streaming engine In com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1,... CVE-2017-16922 5.3 MediumMarch 5, 2018
wowza streaming engine An issue was discovered in Wowza Streaming Engine before 4.7.1. There is an XSS vulnerability in... CVE-2018-7049 6.1 MediumMarch 1, 2018
wowza streaming engine An issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service ... CVE-2018-7048 7.5 HighMarch 1, 2018
wowza streaming engine An issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1. The file... CVE-2018-7047 9.8 CriticalMarch 1, 2018