← All advisories

Medium severity6.1NVD Advisory· Published Nov 12, 2019· Updated Jun 17, 2026

CVE-2019-18882

CVE-2019-18882

Description

WSO2 IS as Key Manager 5.7.0 allows stored XSS in download-userinfo.jag because Content-Type is mishandled.

Affected products

1

WSO2/IS as Key Managerdescription

Patches

Vulnerability mechanics

References

1

docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0625nvdPatchVendor Advisory

News mentions

0

No linked articles in our index yet.