CVEvulnerability

CVE-2020-13883

6.7 MEDIUM Published 2020-06-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-06-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
CVSS 3.0 ([email protected])
5.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-611

Description

In WSO2 API Manager 3.0.0 and earlier, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5.9.0 and earlier, Management Console allows XXE during addition or update of a Lifecycle.

Affected configurations

• wso2 api manager (<= 3.0.0) • wso2 api microgateway 2.2.0 • wso2 identity server as key manager (<= 5.9.0)

Related

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References