Vulnerabilities > Wso2 > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-06-18 | CVE-2020-14444 | Cross-site Scripting vulnerability in Wso2 Identity Server and Identity Server AS KEY Manager An issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through 5.9.0. | 5.4 |
| 2020-06-06 | CVE-2020-13883 | XXE vulnerability in Wso2 products In WSO2 API Manager 3.0.0 and earlier, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5.9.0 and earlier, Management Console allows XXE during addition or update of a Lifecycle. | 6.7 |
| 2020-02-19 | CVE-2019-10797 | Unspecified vulnerability in Wso2 Transport-Http Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled. | 6.5 |
| 2020-01-28 | CVE-2019-20439 | Cross-site Scripting vulnerability in Wso2 API Manager 2.6.0 An issue was discovered in WSO2 API Manager 2.6.0. | 4.8 |
| 2020-01-28 | CVE-2019-20438 | Cross-site Scripting vulnerability in Wso2 API Manager 2.6.0 An issue was discovered in WSO2 API Manager 2.6.0. | 4.8 |
| 2020-01-28 | CVE-2019-20437 | Cross-site Scripting vulnerability in Wso2 API Manager and Identity Server An issue was discovered in WSO2 API Manager 2.6.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. | 6.1 |
| 2020-01-28 | CVE-2019-20436 | Cross-site Scripting vulnerability in Wso2 API Manager and Identity Server An issue was discovered in WSO2 API Manager 2.6.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. | 6.1 |
| 2020-01-28 | CVE-2019-20435 | Cross-site Scripting vulnerability in Wso2 API Manager 2.6.0 An issue was discovered in WSO2 API Manager 2.6.0. | 4.8 |
| 2020-01-28 | CVE-2019-20434 | Cross-site Scripting vulnerability in Wso2 API Manager 2.6.0 An issue was discovered in WSO2 API Manager 2.6.0. | 4.8 |
| 2020-01-28 | CVE-2019-20443 | Cross-site Scripting vulnerability in Wso2 API Manager, Enterprise Integrator and Identity Server An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. | 4.8 |