Lucene search
Wso2Identity Server
3 matches found
CVE-2019-18882
WSO2 IS as Key Manager 5.7.0 allows stored XSS in download-userinfo.jag because Content-Type is mishandled.
6.1CVSS5.9AI score0.00421EPSS
CVE-2019-18881
WSO2 IS as Key Manager 5.7.0 allows unauthenticated reflected XSS in the dashboard user profile.
6.1CVSS6AI score0.00422EPSS
CVE-2018-20737
An issue was discovered in WSO2 API Manager 2.1.0 and 2.6.0. Reflected XSS exists in the carbon part of the product.
5.4CVSS5.2AI score0.00324EPSS