CVE-2020-24706: XSS

Q: What is the vulnerability ID of this issue?

The vulnerability ID of this issue is CVE-2020-24706.

Q: What is the severity of CVE-2020-24706?

The severity of CVE-2020-24706 is medium.

Q: Which products are affected by CVE-2020-24706?

CVE-2020-24706 affects WSO2 API Manager through 3.1.0, API Manager Analytics 2.5.0, IS as Key Manager through 5.10.0, Identity Server through 5.10.0, Identity Server Analytics through 5.6.0, and IoT Server 3.1.0.

Q: What is the CWE ID of CVE-2020-24706?

The CWE ID of CVE-2020-24706 is 79.

Q: How can I fix CVE-2020-24706?

To fix CVE-2020-24706, it is recommended to apply the necessary security patch or upgrade to a fixed version of the affected software.

Published Aug 27, 2020

Updated

An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager through 3.1.0, API Manager Analytics 2.5.0, IS as Key Manager through 5.10.0, Identity Server through 5.10.0, Identity Server Analytics through 5.6.0, and IoT Server 3.1.0.

Affected Software

6 affected components

WSO2 API Manager<=3.1.0

WSO2 API Manager Analytics=2.5.0

WSO2 Identity Server<=5.10.0

WSO2 Identity Server Analytics<=5.6.0

WSO2 Identity Server as Key Manager<=5.10.0

WSO2 IoT Server=3.1.0

Event History

Aug 27, 2020

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverity

Frequently Asked Questions

What is the vulnerability ID of this issue?

The vulnerability ID of this issue is CVE-2020-24706.

What is the severity of CVE-2020-24706?

The severity of CVE-2020-24706 is medium.

Which products are affected by CVE-2020-24706?

CVE-2020-24706 affects WSO2 API Manager through 3.1.0, API Manager Analytics 2.5.0, IS as Key Manager through 5.10.0, Identity Server through 5.10.0, Identity Server Analytics through 5.6.0, and IoT Server 3.1.0.

What is the CWE ID of CVE-2020-24706?

The CWE ID of CVE-2020-24706 is 79.

How can I fix CVE-2020-24706?