CVSS 3.0
4.1 mediumCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:NCVE-2019-6512
Medium (4.1) in wso2 api manager. EPSS 1.1% chance of exploitation in the next 30 days.
An issue was discovered in WSO2 API Manager 2.6.0. It is possible to force the application to perform requests to the internal workstation (SSRF port-scanning), other adjacent workstations (SSRF network scanning), or to enumerate files because of the existence of the file:// wrapper.
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
- CWE
- CWE-918
- Published
- Modified
- Record from
- the NVD, synced
Affected
- wso2:api_manager