What is CVE-2020-12719?

CVE-2020-12719 is a high-severity vulnerability in Wso2 Api_manager, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 7.2/10. Published 2020-05-08.

How severe is CVE-2020-12719?

High severity. CVSS v3 base score is 7.2 out of 10.

XXE in Wso2 Api_manager

CVE-2020-12719

XXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and earlier, API Manager Analytics 2.5.0 and earlier, API Microgateway 2.2.0, Enterprise Integrator 6.4.0 and earlier, IS as Key Manager 5.9.0 an…

Vulnerability class: XXE (XML External Entity)

EPSS: 0.010 (60.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-611 — Improper Restriction of XML External Entity Reference (XXE)

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-12719?: CVE-2020-12719 is a high-severity vulnerability in Wso2 Api_manager, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 7.2/10. Published 2020-05-08.
How severe is CVE-2020-12719?: High severity. CVSS v3 base score is 7.2 out of 10.