Approved changes feed: RSS · Atom

cpe:2.3:a:wso2:api_manager_analytics:2.6.0:*:*:*:*:*:*:*

part: a version: 2.6.0 update: *

VendorWso2 (a7ddf9c6-bb76-50d9-a2c9-02e60ad69877)
ProductApi Manager Analytics (078ecf40-b8c8-5f95-a2d1-c4c5c6b14596)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-29548 vulnerable 2026-06-08 05:42:48.467858 Details available
MEDIUM (4.6)
A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0, 6.5.0, and 6.6.0; IS as Key Manager 5.5.0, 5.6.0, 5.7.0, 5.9.0, and 5.10.0; Identity Server 5.5.0, 5.6.0, 5.7.0, 5.9.0, 5.10.0, and 5.11.0; Identity Server Analytics 5.5.0 and 5.6.0; and WSO2 Micro Integrator 1.0.0.
Published: 2022-04-21T00:00:00.000Z
Updated: 2024-08-03T06:26:06.033Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-17453 vulnerable 2026-06-08 05:20:56.516376 Details available
WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter.
Published: 2021-04-05T00:00:00.000Z
Updated: 2024-08-04T13:53:17.471Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.