PT-2020-15754

Name of the Vulnerable Software and Affected Versions WSO2 API Manager versions prior to 3.0.0 WSO2 API Manager Analytics versions 2.2.0 and 2.5.0 WSO2 API Microgateway version 2.2.0 WSO2 Enterprise Integrator versions 6.2.0 and 6.3.0 WSO2 Identity Server Analytics versions prior to 5.6.0...

WSO2 API Manager and WSO2 API Microgateway, WSO2 IS as Key Manager Code Issue Vulnerabilities

WSO2 API Manager and so on are the products of WSO2 Corporation in the U.S.A. WSO2 API Manager is a set of API lifecycle management solutions.WSO2 API Microgateway is a cloud-native, scalable API gateway product.WSO2 IS as Key Manager is a key manager. A code issue vulnerability exists in...

CVE-2020-13883

In WSO2 API Manager 3.0.0 and earlier, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5.9.0 and earlier, Management Console allows XXE during addition or update of a Lifecycle...

CVE-2020-13883

In WSO2 API Manager 3.0.0 and earlier, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5.9.0 and earlier, Management Console allows XXE during addition or update of a Lifecycle...

CVE-2020-13883: Improper Restriction of XML External Entity Reference

In WSO2 API Manager 3.0.0 and earlier, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5.9.0 and earlier, Management Console allows XXE during addition or update of a Lifecycle...

PT-2020-13748

Name of the Vulnerable Software and Affected Versions WSO2 API Manager versions 3.0.0 and earlier WSO2 API Microgateway version 2.2.0 WSO2 IS as Key Manager versions 5.9.0 and earlier Description The issue allows XXE XML External Entity attacks during the addition or update of a Lifecycle in the...