PT-2019-15876
CVE-2019-19587
·
Published
2019-12-04
·
Updated
2019-12-06
Description by
CVSS 3.1
6.1
MediumMetricsAC:L/AV:N/A:N/C:L/I:L/PR:N/S:C/UI:R
Name of the Vulnerable Software and Affected Versions
WSO2 Enterprise Integrator version 6.5.0
Description
Reflected XSS occurs when updating the message processor configuration from the source view in the Management Console.
Recommendations
For WSO2 Enterprise Integrator version 6.5.0, update the software to a version that includes a fix for this issue, as using the current version may pose a security risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾