CVE-2020-12719

XXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and earlier, API Manager Analytics 2.5.0 and earlier, API…

High · published May 7, 2020

CVSS v3.0
8.7
EPSS
1%
Percentile
63.5
In the wild
Unconfirmed
What it is

XXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and earlier, API Manager Analytics 2.5.0 and earlier, API Microgateway 2.2.0, Enterprise Integrator 6.4.0 and earlier, IS as Key Manager 5.9.0 and earlier, Identity Server 5.9.0 and earlier, and Identity Server Analytics 5.6.0 and earlier.

The record
Technical detail
CVSS v3.0
8.7 · HIGH
Vector
CVSS:3.0/AC:L/AV:N/A:H/C:H/I:N/PR:H/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.01034 · 63.5th percentile
Published
2020-05-07T23:40Z
EPSS history
Timeline
  • 07 MAY 23:40Z
    XXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and earlier, API Manager Analytics 2.5.0 and earlier, API…
    cvelistv5