Login Request a demo
AM
Product
Api Microgateway
by Wso2 · last CVE Dec 18, 2023
11
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 2High 3Medium 6Low 0
Severity
All severities11Critical2High3Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Api Microgateway to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-24590
9.1
1%
Aug 21
The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML Entity Expansion attacks
Affected: 2.2.0
CVE-2020-24589
9.1
26%
Aug 21
The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML External Entity injection (XXE) attacks
Affected: 2.2.0
CVE-2020-24703
8.8
1%
Aug 27
An issue was discovered in certain WSO2 products
Affected: 2.2.0
CVE-2023-6836
7.5
0%
Dec 15
Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely used feature of XML parsers to access…
Affected: 2.2.0
CVE-2020-12719
7.2
1%
May 8
XXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and earlier, API Manager Analytics 2.5.0 and earlier, API Microgateway 2.2.0,…
Affected: 2.2.0
CVE-2020-13883
6.7
1%
Jun 6
In WSO2 API Manager 3.0.0 and earlier, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5.9.0 and earlier, Management Console allows XXE during addition or update of a…
Affected: 2.2.0
CVE-2020-24591
6.5
1%
Aug 21
The Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates
Affected: 2.2.0
CVE-2022-29548
6.1
41%
Apr 21
A reflected XSS issue exists in the Management Console of several WSO2 products
Affected: 2.2.0
CVE-2020-17453
6.1
26%
Apr 5
WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter
Affected: 2.2.0
CVE-2020-24704
6.1
1%
Aug 27
An issue was discovered in certain WSO2 products
Affected: 2.2.0
CVE-2023-6911
4.8
0%
Dec 18
Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can be carried out by an attacker injecting a…
Affected: 2.2.0
Showing 11