CVE-2019-20435

An issue was discovered in WSO2 API Manager 2.6.0. A reflected XSS attack could be performed in the inline API documentation editor page of the API Publisher by sending an HTTP GET request with a harmful docName request parameter...

CVE-2019-20438

An issue was discovered in WSO2 API Manager 2.6.0. A potential stored Cross-Site Scripting XSS vulnerability has been identified in the inline API documentation editor page of the API Publisher...

CVE-2019-20438

CVE-2019-20438 affects WSO2 API Manager 2.6.0. The issue is a potential stored Cross-Site Scripting (XSS) vulnerability identified in the inline API documentation editor page of the API Publisher. The connected documents confirm the same description across multiple sources (NVD/Red Hat/NVD family...

CVE-2019-20439

An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting XSS vulnerability has been identified in defining a scope in the "manage the API" page of the API Publisher...

CVE-2019-20439

CVE-2019-20439 affects WSO2 API Manager 2.6.0. The issue is a potential reflected Cross-Site Scripting (XSS) in the scope definition feature of the API Publisher’s “manage the API” page. The publicly provided descriptions attribute this to insufficient validation of client-side data in the web ap...

PT-2020-10450 · Wso2 · Wso2 Api Manager

Name of the Vulnerable Software and Affected Versions: WSO2 API Manager version 2.6.0 Description: A potential Reflected Cross-Site Scripting XSS issue has been identified in defining a scope in the "manage the API" page of the API Publisher. Recommendations: For WSO2 API Manager version 2.6.0,...

PT-2020-10451

Name of the Vulnerable Software and Affected Versions WSO2 API Manager version 2.6.0 Description A potential Reflected Cross-Site Scripting XSS issue has been identified in the update API documentation feature of the API Publisher. This could potentially allow for malicious script execution...

PT-2020-10452

Name of the Vulnerable Software and Affected Versions WSO2 API Manager version 2.6.0 Description A potential Stored Cross-Site Scripting XSS issue has been identified in the 'implement phase' of the API Publisher. This could allow for malicious scripts to be stored and executed, potentially leadi...

CVE-2019-20438: Improper Neutralization of Input During Web Page Generation

An issue was discovered in WSO2 API Manager 2.6.0. A potential stored Cross-Site Scripting XSS vulnerability has been identified in the inline API documentation editor page of the API Publisher...

CVE-2019-20440: Improper Neutralization of Input During Web Page Generation

An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting XSS vulnerability has been identified in the update API documentation feature of the API Publisher...

CVE-2019-20439: Improper Neutralization of Input During Web Page Generation

An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting XSS vulnerability has been identified in defining a scope in the "manage the API" page of the API Publisher...

CVE-2019-20441: Improper Neutralization of Input During Web Page Generation

An issue was discovered in WSO2 API Manager 2.6.0. A potential Stored Cross-Site Scripting XSS vulnerability has been identified in the 'implement phase' of the API Publisher...

CVE-2019-20435: Improper Neutralization of Input During Web Page Generation

An issue was discovered in WSO2 API Manager 2.6.0. A reflected XSS attack could be performed in the inline API documentation editor page of the API Publisher by sending an HTTP GET request with a harmful docName request parameter...