What’s Vulnerable › Vulnerabilities

CVE-2020-13883

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-06-06 · updated 2026-06-17
• Weakness: CWE-611

Description

In WSO2 API Manager 3.0.0 and earlier, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5.9.0 and earlier, Management Console allows XXE during addition or update of a Lifecycle.

Affected products

• WSO2 API Manager: through 3.0.0
• WSO2 Api Microgateway: 2.2.0
• WSO2 Identity Server As Key Manager: through 5.9.0

References

• https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0727
• https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0727

Get alerted when CVE-2020-13883 or the next vulnerability affects your stack