Vulnerabilities > Wso2 > API Manager Analytics > 2.6.0

DATE CVE VULNERABILITY TITLE RISK
2022-04-21 CVE-2022-29548 Cross-site Scripting vulnerability in Wso2 products
A reflected XSS issue exists in the Management Console of several WSO2 products.
network
low complexity
wso2 CWE-79
6.1
2021-04-05 CVE-2020-17453 Cross-site Scripting vulnerability in Wso2 products
WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter.
network
low complexity
wso2 CWE-79
6.1