Medium severity5.4NVD Advisory· Published Jun 18, 2020· Updated Jun 17, 2026

CVE-2020-14444

Description

An issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through 5.9.0. A potential Reflected Cross-Site Scripting (XSS) vulnerability has been identified in the Management Console Policy Administration user interface.

Affected products

WSO2/Identity Serverdescription

Patches

Vulnerability mechanics

References

cybersecurityworks.com/zerodays/cve-2020-14444-wso2.htmlnvdExploitThird Party Advisory
docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0707nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000