| Package | Affected versions | Patched versions |
|---|---|---|
| api manager | ≤ 3.0.0 | |
| api manager analytics | ≤ 2.5.0 | |
| api microgateway | = 2.2.0 | |
| enterprise integrator | ≤ 6.4.0 | |
| identity server | ≤ 5.9.0 | |
| identity server analytics | ≤ 5.6.0 | |
| identity server as key manager | ≤ 5.9.0 |
XXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and earlier, API Manager Analytics 2.5.0 and earlier, API Microgateway 2.2.0, Enterprise Integrator 6.4.0 and earlier, IS as Key Manager 5.9.0 and earlier, Identity Server 5.9.0 and earlier, and Identity Server Analytics 5.6.0 and earlier.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free