medium5.4
CVE-2020-14444
An issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through 5.9.0.
Impact
An issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through 5.9.0. A potential Reflected Cross-Site Scripting (XSS) vulnerability has been identified in the Management Console Policy Administration user interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wso2 | Identity Server | through 5.9.0 |
| Wso2 | Identity Server As Key Manager | through 5.9.0 |