Lucene search

CVE-2020-27885

🗓️ 29 Oct 2020 21:15:15Reported by [email protected]Type

Cross-Site Scripting (XSS) vulnerability on WSO2 API Manager 3.1.0. Exploitation allows session hijacking, cookie theft, password changes, and user session invalidation by the attacker

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
CVE	CVE-2020-27885	29 Oct 202021:15	–	cve
Cvelist	CVE-2020-27885	29 Oct 202020:14	–	cvelist
OSV	CVE-2020-27885	29 Oct 202021:15	–	osv
Veracode	Cross-site Scripting (XSS)	10 May 202207:48	–	veracode
Prion	Cross site scripting	29 Oct 202021:15	–	prion
RedhatCVE	CVE-2020-27885	22 May 202515:52	–	redhatcve

Nvd

Node

wso2 api_managerMatch3.1.0

Source	Link
rodrigofavarini	www.rodrigofavarini.com.br/cybersecurity/multiple-xss-on-api-manager-3-1-0/
docs	www.docs.wso2.com/display/Security/2020+Advisories

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Oct 2020 21:15Current

6.1Medium risk

Vulners AI Score6.1

CVSS24.3

CVSS36.1

EPSS0.01056

CWE-79