CVE-2019-20434

Mô tả

Tham khảo

• cybersecurityworks.com/zerodays/cve-2019-20434-wso2.html · Exploit
• docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0616 · Vendor Advisory
• cybersecurityworks/Disclosed · Exploit

Lỗ hổng khác của api manager

• CVE-2025-12737CAO 8.4The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a mal…
• CVE-2026-3416CAO 7.5The API Publisher component previously used a non-cryptographic pseudorandom number generator (PRNG) to create shared secrets for Webhook HM…
• CVE-2026-5430NGHIÊM TRỌNG 10.0ĐANG BỊ KHAI THÁC (CISA KEV)The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an a…
• CVE-2026-1728NGHIÊM TRỌNG 9.8Tokens issued to a low-privileged user are not sufficiently restricted, allowing them to be used to access product-level Admin REST APIs. E…
• CVE-2026-0637TRUNG BÌNH 4.4When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties. This logging oc…