CVE

CVE-2020-24589

9.1

CVSScritical

Exploitable remotely over the internet · no authentication required.

Description

The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML External Entity injection (XXE) attacks.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

Updated Sep 26, 2026View on NVD →

S4E scanner

CVE-2020-24589 Scanner

CVE-2020-24589 scanner - XML External Entity (XXE) vulnerability in Management Console in WSO2 API Manager and API Microgateway

Used 2.1k times · 4.3k assets checked · domain, ipv4, subdomain

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.