Medium severity4.8NVD Advisory· Published Aug 16, 2019· Updated Jun 17, 2026

CVE-2019-15108

Description

An issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457. There is XSS via a crafted filename to the file-upload feature of the event simulator component.

Affected products

WSO2/API Managerdescription

Patches

Vulnerability mechanics

References

docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0597nvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000