Lucene search

K
cvelistMitreCVELIST:CVE-2020-13883
HistoryJun 06, 2020 - 6:49 p.m.

CVE-2020-13883

2020-06-0618:49:13
mitre
www.cve.org

5.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H

0.001 Low

EPSS

Percentile

35.2%

In WSO2 API Manager 3.0.0 and earlier, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5.9.0 and earlier, Management Console allows XXE during addition or update of a Lifecycle.

5.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H

0.001 Low

EPSS

Percentile

35.2%

Related for CVELIST:CVE-2020-13883