Product by WSO2

API Microgateway

11 known vulnerabilities in API Microgateway (WSO2), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in API Microgateway (WSO2)

Critical	CVE-2020-24589	WSO2 API Manager: XML External Entity (XXE) also in 1 other product	9.1	21.08.2020
Medium	CVE-2020-17453	WSO2 Identity Server as Key Manager: Cross-Site Scripting (XSS) also in 7 other products	6.1	05.04.2021
Medium	CVE-2022-29548	WSO2 API Manager: Cross-Site Scripting (XSS) also in 8 other products	4.6	21.04.2022
Critical	CVE-2020-24590	WSO2 API Manager: security vulnerability also in 1 other product	9.1	21.08.2020
High	CVE-2020-24703	WSO2 Identity Server: security vulnerability also in 8 other products	8.8	27.08.2020
High	CVE-2020-12719	WSO2 API Manager: XML External Entity (XXE) also in 6 other products	8.7	07.05.2020
Medium	CVE-2020-24591	WSO2 API Manager Analytics: XML External Entity (XXE) also in 4 other products	6.5	21.08.2020
Medium	CVE-2020-24704	WSO2 Identity Server: Cross-Site Scripting (XSS) also in 8 other products	6.1	27.08.2020
Medium	CVE-2020-13883	WSO2 API Manager: XML External Entity (XXE) also in 2 other products	5.5	06.06.2020
High	CVE-2023-6836	WSO2 API Manager: Improper Restriction of XML External Entity Reference also in 11 other products	4.6	15.12.2023
Medium	CVE-2023-6911	WSO2 API Manager: Cross-site Scripting also in 11 other products	4.8	18.12.2023