CVE-2020-24589

2020-08-2120:15:10

Google

osv.dev

7.2 High

AI Score

Confidence

Low

0.648 Medium

EPSS

Percentile

97.9%

JSON

The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML External Entity injection (XXE) attacks.

CPENameOperatorVersion
product-apimeq2.1.0-update1
product-apimeq2.1.0-update3
product-apimeq1.9.0-Beta-3
product-apimeq1.10.0-rc4
product-apimeq2.0.0
product-apimeq1.10.0-rc3
product-apimeq1.9.0
product-apimeqtest-tag-1.9.0-Alpha
product-apimeq1.9.0-M2
product-apimeq2.0.0-rc5

Name	Operator	Version
product-apim	eq	2.1.0-update1
product-apim	eq	2.1.0-update3
product-apim	eq	1.9.0-Beta-3
product-apim	eq	1.10.0-rc4
product-apim	eq	2.0.0
product-apim	eq	1.10.0-rc3
product-apim	eq	1.9.0
product-apim	eq	test-tag-1.9.0-Alpha
product-apim	eq	1.9.0-M2
product-apim	eq	2.0.0-rc5