CVE-2020-27885

Cross-Site Scripting (XSS) vulnerability on WSO2 API Manager 3.1.0

published October 29, 2020

CVSS
—
EPSS
1%
Percentile
65.3
In the wild
Unconfirmed
What it is

Cross-Site Scripting (XSS) vulnerability on WSO2 API Manager 3.1.0. By exploiting a Cross-site scripting vulnerability the attacker can hijack a logged-in user’s session by stealing cookies which means that a malicious hacker can change the logged-in user’s password and invalidate the session of the victim while the hacker maintains access.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01094 · 65.3th percentile
Published
2020-10-29T20:14Z
EPSS history
Timeline
  • 29 OCT 20:14Z
    Cross-Site Scripting (XSS) vulnerability on WSO2 API Manager 3.1.0
    cvelistv5