| Package | Affected versions | Patched versions |
|---|---|---|
| org.wso2.am:wso2am | < 4.0.0-beta | 4.0.0-beta |
| org.wso2.carbon.analytics-common:org.wso2.carbon.event.input.adapter.core | < 5.2.23 | 5.2.23 |
| org.wso2.carbon.commons:org.wso2.carbon.ntask.core | < 4.7.24 | 4.7.24 |
| org.wso2.carbon.event-processing:org.wso2.carbon.event.processor.core | < 2.2.12 | 2.2.12 |
| org.wso2.carbon.governance:org.wso2.carbon.governance.common | < 4.8.13 | 4.8.13 |
| org.wso2.carbon.registry:org.wso2.carbon.registry.extensions | < 4.7.31 | 4.7.31 |
| api manager | ≤ 3.0.0 | |
| api manager analytics | = 2.2.0= 2.5.0 | |
| api microgateway | = 2.2.0 | |
| enterprise integrator | ≤ 6.6.0 | |
| identity server | = 5.4.0= 5.4.1= 5.5.0= 5.6.0 | |
| identity server as key manager | = 5.0.0= 5.6.0= 5.7.0= 5.9.0 | |
| micro integrator | = 1.0.0 |
Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely used feature of XML parsers to access sensitive information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free