CVE-2019-20435

An issue was discovered in WSO2 API Manager 2.6.0

Low · published January 27, 2020

CVSS v3.0
3.5
EPSS
1%
Percentile
64.8
In the wild
Unconfirmed
What it is

An issue was discovered in WSO2 API Manager 2.6.0. A reflected XSS attack could be performed in the inline API documentation editor page of the API Publisher by sending an HTTP GET request with a harmful docName request parameter.

The record
Technical detail
CVSS v3.0
3.5 · LOW
Vector
CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:H/S:U/UI:R
CVSS v4.0
Not supplied
EPSS
0.01079 · 64.8th percentile
Published
2020-01-27T23:38Z
EPSS history
Timeline
  • 27 JAN 23:38Z
    An issue was discovered in WSO2 API Manager 2.6.0
    cvelistv5