high7.2
CVE-2020-12719
XXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and earlier, API Manager Analytics 2.5.0 and earlier, API Microga…
Impact
XXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and earlier, API Manager Analytics 2.5.0 and earlier, API Microgateway 2.2.0, Enterprise Integrator 6.4.0 and earlier, IS as Key Manager 5.9.0 and earlier, Identity Server 5.9.0 and earlier, and Identity Server Analytics 5.6.0 and earlier.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wso2 | Api Manager | through 3.0.0 |
| Wso2 | Api Manager Analytics | through 2.5.0 |
| Wso2 | Api Microgateway | Version 2.2.0 |
| Wso2 | Enterprise Integrator | through 6.4.0 |
| Wso2 | Identity Server | through 5.9.0 |
| Wso2 | Identity Server Analytics | through 5.6.0 |
| Wso2 | Identity Server As Key Manager | through 5.9.0 |