CVSS 3.1
4.8 mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NCVE-2019-20443
An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. A potential stored Cross-Site Scripting (XSS) vulnerability in mediaType has been identified in the registry UI.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- wso2:api_manager
- wso2:enterprise_integrator
- wso2:identity_server
References
- https://cybersecurityworks.com/zerodays/cve-2019-20443-wso2.html
- https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0636
- https://github.com/cybersecurityworks/Disclosed/issues/26
- https://cybersecurityworks.com/zerodays/cve-2019-20443-wso2.html
- https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0636