CVE-2020-24706

2020-08-2716:15:11

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.3%

JSON

An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager through 3.1.0, API Manager Analytics 2.5.0, IS as Key Manager through 5.10.0, Identity Server through 5.10.0, Identity Server Analytics through 5.6.0, and IoT Server 3.1.0.

CPENameOperatorVersion
product-apimeq3.1.0-rc2
product-apimeq2.1.0-update3
product-apimeq1.10.0-rc4
product-apimeq3.0.0-beta
product-apimeq2.6.0-rc1
product-apimeq3.1.0
product-apimeq2.5.0
product-apimeq3.1.0-rc3
product-apimeq1.9.0-Beta-2
product-apimeq2.5.0-Beta

Name	Operator	Version
product-apim	eq	3.1.0-rc2
product-apim	eq	2.1.0-update3
product-apim	eq	1.10.0-rc4
product-apim	eq	3.0.0-beta
product-apim	eq	2.6.0-rc1
product-apim	eq	3.1.0
product-apim	eq	2.5.0
product-apim	eq	3.1.0-rc3
product-apim	eq	1.9.0-Beta-2
product-apim	eq	2.5.0-Beta