CVE-2023-6836 | BDVDB-2026-219459 Detail
WSO2WSO2 API Manager
Description#
Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely used feature of XML parsers to access sensitive information.
Impact#
CAPEC-250 XML Injection
Weaknesses#
- CWE-611 Improper Restriction of XML External Entity Reference
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.