This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2023-6836 | BDVDB-2026-219459 Detail

WSO2WSO2 API Manager

Description#

Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely used feature of XML parsers to access sensitive information.

Impact#

CAPEC-250 XML Injection

Weaknesses#

  • CWE-611 Improper Restriction of XML External Entity Reference

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.