CVE-2019-19587

EUVD-2019-9204 · Published Dec 5, 2019

In WSO2 Enterprise Integrator 6.5.0, reflected XSS occurs when updating the message processor configuration from the source view in the Management Console.

Technologies

Wso2 Enterprise Integrator

Weaknesses

CWE-79

CVSS scores

v3.16.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
v2.04.3AV:N/AC:M/Au:N/C:N/I:P/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0658

Potentially impacted assets

See if this affects your attack surface