CVE-2020-11885 MEDIUM

CVE-2020-11885

Vendor N/A
Product n/a
Published April 17, 2020
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

4.0/10
Attack vector Network
Attack complexity High
Privileges required High
User interaction Required
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/AC:H/AV:N/A:L/C:L/I:N/PR:H/S:C/UI:R

What the vulnerability does

01Description

WSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user (with admin console access) can use the XML validator to make unintended network invocations such as SSRF via an uploaded file.

Key dates

02Disclosure timeline

April 17, 2020 CVE published
August 4, 2024 Record updated