{"cvss":9.1,"datePublished":"2024-01-22T00:00:00Z","dateUpdated":"2024-01-22T00:00:00Z","description":"The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML External Entity injection (XXE) attacks.","dueDate":"","id":"CVE-2020-24589","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"api_manager","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"WSO2 api_manager Improper Restriction of XML External Entity Reference","vendor":"WSO2"}