high7.2
CVE-2020-11885
WSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user (with admin console access) can use the XML validator to make unintended network…
Impact
WSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user (with admin console access) can use the XML validator to make unintended network invocations such as SSRF via an uploaded file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wso2 | Enterprise Integrator | through 6.6.0 |