CVE-2020-24704

2020-08-2716:15:11

Google

osv.dev

wso2

reflected xss

api manager

analytics

microgateway

data analytics server

enterprise integrator

identity server

iot server

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

33.8%

JSON

An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager 2.2.0, API Manager Analytics 2.2.0, API Microgateway 2.2.0, Data Analytics Server 3.2.0, Enterprise Integrator through 6.6.0, IS as Key Manager 5.5.0, Identity Server 5.5.0 and 5.8.0, Identity Server Analytics 5.5.0, and IoT Server 3.3.0 and 3.3.1.