What is CVE-2020-12719?

CVE-2020-12719 is a high-severity vulnerability in Wso2 API Manager, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 7.2/10. Published 2020-05-08.

How severe is CVE-2020-12719?

High severity. CVSS v3 base score is 7.2 out of 10.

XXE in Wso2 API Manager

CVE-2020-12719

XXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and earlier, API Manager Analytics 2.5.0 and earlier, API Microgateway 2.2.0, Enterprise Integrator 6.4.0 and earlier, IS as Key Manager 5.9.0 and earlier, Identity Server 5.9.0 and earlier, and Identity Server Analytics 5.6.0 and earlier.

Vulnerability class: XXE (XML External Entity)

EPSS: 0.010 (61.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-611 — Improper Restriction of XML External Entity Reference (XXE)

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-12719?: CVE-2020-12719 is a high-severity vulnerability in Wso2 API Manager, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 7.2/10. Published 2020-05-08.
How severe is CVE-2020-12719?: High severity. CVSS v3 base score is 7.2 out of 10.