CVEDB API

WSO2 Enterprise Integrator 6.6.0 or earlier contains a stored cross-site scripting (XSS) vulnerability in BPMN explorer tasks.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 56.3%

CVSS Severity

CVSS v3 Score 5.4

CVSS v2 Score 3.5

References

Products affected by CVE-2020-25516

Wso2 » Enterprise Integrator » Version: 6.1.0

cpe:2.3:a:wso2:enterprise_integrator:6.1.0
Wso2 » Enterprise Integrator » Version: 6.1.1

cpe:2.3:a:wso2:enterprise_integrator:6.1.1
Wso2 » Enterprise Integrator » Version: 6.2.0

cpe:2.3:a:wso2:enterprise_integrator:6.2.0
Wso2 » Enterprise Integrator » Version: 6.3.0

cpe:2.3:a:wso2:enterprise_integrator:6.3.0
Wso2 » Enterprise Integrator » Version: 6.4.0

cpe:2.3:a:wso2:enterprise_integrator:6.4.0
Wso2 » Enterprise Integrator » Version: 6.5.0

cpe:2.3:a:wso2:enterprise_integrator:6.5.0
Wso2 » Enterprise Integrator » Version: 6.6.0

cpe:2.3:a:wso2:enterprise_integrator:6.6.0