CVE-2020-24704

Опубликовано: 27 авг. 2020

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager 2.2.0, API Manager Analytics 2.2.0, API Microgateway 2.2.0, Data Analytics Server 3.2.0, Enterprise Integrator through 6.6.0, IS as Key Manager 5.5.0, Identity Server 5.5.0 and 5.8.0, Identity Server Analytics 5.5.0, and IoT Server 3.3.0 and 3.3.1.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:wso2:api_manager:2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:api_manager_analytics:2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:api_microgateway:2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:data_analytics_server:3.2.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:enterprise_integrator:*:*:*:*:*:*:*:*

Версия до 6.6.0 (включая)

cpe:2.3:a:wso2:identity_server:5.5.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:identity_server:5.8.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:identity_server_analytics:5.5.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:identity_server_as_key_manager:5.5.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:iot_server:3.3.0:*:*:*:*:*:*:*

cpe:2.3:a:wso2:iot_server:3.3.1:*:*:*:*:*:*:*

EPSS

Процентиль: 40%

0.00187

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-vq34-j976-636x