CVE-2019-20442

PoC —

CVSS 3.1

4.8 medium

EPSS

<1%p52

Published

Jan 28, 2020 (Jan 28, 2020)

Modified

Jun 17, 2026

Description

An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. A potential stored Cross-Site Scripting (XSS) vulnerability in roleToAuthorize has been identified in the registry UI.

Vendors: wso2
Products: api manager, enterprise integrator, identity server
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.