CVE-2020-13883 - In WSO2 API Manager 3.0.0 and earlier, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5.9.0 and earlier, Management Console allows XXE during addition or update of a Lifecycle

Back Back to CVE browser

MEDIUM

In WSO2 API Manager 3.0.0 and earlier, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5.9.0 and earlier, Management Console allows XXE during addition or update of a Lifecycle

Published Jun 6, 2020

6.7

MEDIUM

CVSS 3.1

EPSS 0.80%

Description

In WSO2 API Manager 3.0.0 and earlier, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5.9.0 and earlier, Management Console allows XXE during addition or update of a Lifecycle.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-611

XXE

References (2)

https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0727
x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-6091
Advisory

Link	Providers	Tags
https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0727		x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-6091		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 6, 2020

Updated Aug 4, 2024

Reserved Jun 6, 2020

Link CVE-2020-13883

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-13883

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jun 6, 2020

Updated Aug 4, 2024

Link EUVD-2020-6091

GitHub

No data