← All advisories

Medium severity5.4NVD Advisory· Published Mar 21, 2019· Updated Jun 17, 2026

CVE-2018-20737

CVE-2018-20737

Description

An issue was discovered in WSO2 API Manager 2.1.0 and 2.6.0. Reflected XSS exists in the carbon part of the product.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

Wso2 Extensions/Identity Inbound Auth OAuthreferences

Patches

Vulnerability mechanics

References

3

github.com/wso2-extensions/identity-inbound-auth-oauth/pull/978/filesnvdPatchThird Party Advisory
wso2.com/security-patch-releases/api-managernvdPatchThird Party AdvisoryVendor Advisory
www.excellium-services.com/cert-xlm-advisory/cve-2018-20737/nvdPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.