CVE-2020-11885
WSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user (with admin console access) can use the XML validator to make unintended network invocations such …
Published: 2020-04-17 · CVSS: 4.0 · CVSS 3.0
WSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user (with admin console access) can use the XML validator to make unintended network invocations such as SSRF via an uploaded file.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7