Design/Logic Flaw

2021-04-0522:15:00

PRIOn knowledge base

www.prio-n.com

0.008 Low

EPSS

Percentile

82.2%

JSON

WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter.

CPENameOperatorVersion
api_managerle3.2.0
api_manager_analyticseq2.2.0
api_manager_analyticseq2.5.0
api_manager_analyticseq2.6.0
api_microgatewayeq2.2.0
enterprise_integratorle6.6.0
identity_serverle5.10.0
identity_server_analyticseq5.5.0
identity_server_analyticseq5.4.1
identity_server_analyticseq5.6.0

Name	Operator	Version
api_manager	le	3.2.0
api_manager_analytics	eq	2.2.0
api_manager_analytics	eq	2.5.0
api_manager_analytics	eq	2.6.0
api_microgateway	eq	2.2.0
enterprise_integrator	le	6.6.0
identity_server	le	5.10.0
identity_server_analytics	eq	5.5.0
identity_server_analytics	eq	5.4.1
identity_server_analytics	eq	5.6.0