Wso2 Api Microgateway vulnerabilities

• wso2 api manager, api manager analytics, api microgateway +7 more +9 more WSO2 Registry Stored Cross Site Scripting (XSS) vulnerability CVE-2023-6911 Fix available 4.8 MediumDecember 18, 2023
• wso2 api manager, api manager analytics, api microgateway +5 more +7 more WSO2 products vulnerable to XML External Entity attack CVE-2023-6836 Fix available 4.6 MediumDecember 15, 2023
• wso2 api manager, api manager analytics, api microgateway +6 more +8 more A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API... CVE-2022-29548 Public exploit EPSS 41.1% 4.6 MediumApril 21, 2022
• wso2 api manager, api manager analytics, api microgateway +5 more +7 more WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter. CVE-2020-17453 Public exploit EPSS 26.2% 6.1 MediumApril 5, 2021
• wso2 api manager, api manager analytics, api microgateway +6 more +8 more An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This... CVE-2020-24704 6.1 MediumAugust 27, 2020
• wso2 api manager, api manager analytics, api microgateway +6 more +8 more An issue was discovered in certain WSO2 products. A valid Carbon Management Console session... CVE-2020-24703 8.8 HighAugust 27, 2020
• wso2 api manager, api microgateway +1 more The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML... CVE-2020-24589 EPSS 26.3% 9.1 CriticalAugust 21, 2020
• wso2 api manager, api manager analytics, api microgateway +2 more +4 more The Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates.... CVE-2020-24591 6.5 MediumAugust 21, 2020
• wso2 api manager, api microgateway +1 more The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML... CVE-2020-24590 9.1 CriticalAugust 21, 2020
• wso2 api manager, api microgateway, identity server as key manager +2 more In WSO2 API Manager 3.0.0 and earlier, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5... CVE-2020-13883 5.5 MediumJune 6, 2020
• wso2 api manager, api manager analytics, api microgateway +4 more +6 more XXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and... CVE-2020-12719 8.7 HighMay 7, 2020