CVE-2019-20443

An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0

Low · published January 27, 2020

CVSS v3.0
3.5
EPSS
1%
Percentile
56.1
In the wild
Unconfirmed
What it is

An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. A potential stored Cross-Site Scripting (XSS) vulnerability in mediaType has been identified in the registry UI.

The record
Technical detail
CVSS v3.0
3.5 · LOW
Vector
CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:H/S:U/UI:R
CVSS v4.0
Not supplied
EPSS
0.00800 · 56.1th percentile
Published
2020-01-27T23:36Z
EPSS history
Timeline
  • 27 JAN 23:36Z
    An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0
    cvelistv5