← Database

CVE-2022-29548

MEDIUM CVSS: 4.6 Published: 2022-04-21 Modified: 2026-06-17

Description

A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0, 6.5.0, and 6.6.0; IS as Key Manager 5.5.0, 5.6.0, 5.7.0, 5.9.0, and 5.10.0; Identity Server 5.5.0, 5.6.0, 5.7.0, 5.9.0, 5.10.0, and 5.11.0; Identity Server Analytics 5.5.0 and 5.6.0; and WSO2 Micro Integrator 1.0.0.

Affected Platforms

Wso2 Api MicrogatewayWso2 Micro IntegratorWso2 Api Manager AnalyticsWso2 Enterprise IntegratorWso2 Identity Server AnalyticsWso2 Identity ServerWso2 Api ManagerWso2 Identity Server As Key ManagerWso2 Data Analytics Server

Weakness Type

CWE-79

References