CVE-2020-13883

2020-06-0619:15:00

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.2%

JSON

In WSO2 API Manager 3.0.0 and earlier, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5.9.0 and earlier, Management Console allows XXE during addition or update of a Lifecycle.

CPENameOperatorVersion
product-apimeq2.1.0-update1
product-apimeq2.1.0-update3
product-apimeq1.9.0-Beta-3
product-apimeq1.10.0-rc4
product-apimeq2.0.0
product-apimeq1.10.0-rc3
product-apimeq1.9.0
product-apimeqtest-tag-1.9.0-Alpha
product-apimeq1.9.0-M2
product-apimeq2.0.0-rc5

Name	Operator	Version
product-apim	eq	2.1.0-update1
product-apim	eq	2.1.0-update3
product-apim	eq	1.9.0-Beta-3
product-apim	eq	1.10.0-rc4
product-apim	eq	2.0.0
product-apim	eq	1.10.0-rc3
product-apim	eq	1.9.0
product-apim	eq	test-tag-1.9.0-Alpha
product-apim	eq	1.9.0-M2
product-apim	eq	2.0.0-rc5