CVE-2020-11885

概要

参考情報

• docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0684 · Vendor Advisory

enterprise integrator のその他の脆弱性

• CVE-2025-13394中 5.4The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery (CSRF) at…
• CVE-2025-6670高 8.8A Cross-Site Request Forgery (CSRF) vulnerability exists in multiple WSO2 products due to the use of the HTTP GET method for state-changing …
• CVE-2025-10853中 6.1A reflected cross-site scripting (XSS) vulnerability exists in the management console of multiple WSO2 products due to improper output encod…
• CVE-2025-11093高 7.2An arbitrary code execution vulnerability exists in multiple WSO2 products due to insufficient restrictions in the GraalJS and NashornJS Scr…
• CVE-2025-10907高 7.2An arbitrary file upload vulnerability exists in multiple WSO2 products due to insufficient validation of uploaded content and destination i…