CVE-2020-24589

CRITICAL · CVSS 9.1 EPSS 26.94%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-08-21 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-24589

Severity

CRITICAL

CVSS

9.1

EPSS

26.94%

The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML External Entity injection (XXE) attacks.