Medium severity6.1NVD Advisory· Published Aug 27, 2020· Updated Jun 17, 2026

CVE-2020-24706

Description

An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager through 3.1.0, API Manager Analytics 2.5.0, IS as Key Manager through 5.10.0, Identity Server through 5.10.0, Identity Server Analytics through 5.6.0, and IoT Server 3.1.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WSO2/API Managerdescription
Wso2/Wso2 IoT Serverllm-fuzzy
Range: =3.1.0

Patches

Vulnerability mechanics

References

docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0718nvdVendor Advisory
security.docs.wso2.com/en/latest/security-announcements/security-advisories/2020/WSO2-2020-0718/nvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000