Medium severity5.4NVD Advisory· Published Jan 29, 2020· Updated Jun 17, 2026
CVE-2019-7655
CVE-2019-7655
Description
Wowza Streaming Engine 4.8.0 and earlier from multiple authenticated XSS vulnerabilities via the (1) customList%5B0%5D.value field in enginemanager/server/serversetup/edit_adv.htm of the Server Setup configuration or the (2) host field in enginemanager/j_spring_security_check of the login form. This issue was resolved in Wowza Streaming Engine 4.8.5.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:wowza:streaming_engine:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:wowza:streaming_engine:*:*:*:*:*:*:*:*range: <=4.8.0
- (no CPE)range: <=4.8.0
- Wowza/Streaming Enginedescription
Patches
Vulnerability mechanics
References
4- github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-7655-XSS-WowzanvdExploitThird Party Advisory
- raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2019-7655.txtnvdThird Party Advisory
- www.wowza.com/docs/wowza-streaming-engine-4-8-5-release-notesnvdRelease NotesVendor Advisory
- www.wowza.com/pricing/installernvdVendor Advisory
News mentions
0No linked articles in our index yet.