cveboard RSS feed

CVE-2023-6911

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can be carried out by an attacker injecting a malicious payload into the Registry feature of the Management Console.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

WSO2 API Manager

Vendor
WSO2
Product
WSO2 API Manager
Platforms
Unknown
Default status
unaffected
WSO2 API Manager · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom2.2.0.0UnavailableNone listed
2.2.0.0affectedcustom2.2.0.1UnavailableNone listed
2.5.0.0affectedcustom2.5.0.1UnavailableNone listed
2.6.0.0affectedcustom2.6.0.1UnavailableNone listed
3.0.0.0affectedcustom3.0.0.1UnavailableNone listed
3.1.0.0affectedcustom3.1.0.1UnavailableNone listed
3.2.0.0affectedcustom3.2.0.1UnavailableNone listed

WSO2 API Manager Analytics

Vendor
WSO2
Product
WSO2 API Manager Analytics
Platforms
Unknown
Default status
unaffected
WSO2 API Manager Analytics · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom2.2.0.0UnavailableNone listed
2.2.0.0affectedcustom2.2.0.1UnavailableNone listed
2.5.0.0affectedcustom2.5.0.1UnavailableNone listed

WSO2 API Microgateway

Vendor
WSO2
Product
WSO2 API Microgateway
Platforms
Unknown
Default status
unaffected
WSO2 API Microgateway · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom2.2.0.0UnavailableNone listed
2.2.0.0affectedcustom2.2.0.1UnavailableNone listed

WSO2 Data Analytics Server

Vendor
WSO2
Product
WSO2 Data Analytics Server
Platforms
Unknown
Default status
unaffected
WSO2 Data Analytics Server · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom3.2.0.0UnavailableNone listed
3.2.0.0affectedcustom3.2.0.1UnavailableNone listed

WSO2 Enterprise Integrator

Vendor
WSO2
Product
WSO2 Enterprise Integrator
Platforms
Unknown
Default status
unaffected
WSO2 Enterprise Integrator · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom6.1.0.0UnavailableNone listed
6.1.0.0affectedcustom6.1.0.9UnavailableNone listed
6.1.1.0affectedcustom6.1.1.9UnavailableNone listed
6.2.0.0affectedcustom6.2.0.7UnavailableNone listed
6.3.0.0affectedcustom6.3.0.1UnavailableNone listed
6.4.0.0affectedcustom6.4.0.1UnavailableNone listed
6.5.0.0affectedcustom6.5.0.6UnavailableNone listed
6.6.0.0affectedcustom6.6.0.11UnavailableNone listed

WSO2 IS as Key Manager

Vendor
WSO2
Product
WSO2 IS as Key Manager
Platforms
Unknown
Default status
unaffected
WSO2 IS as Key Manager · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom5.5.0.0UnavailableNone listed
5.5.0.0affectedcustom5.5.0.1UnavailableNone listed
5.6.0.0affectedcustom5.6.0.1UnavailableNone listed
5.7.0.0affectedcustom5.7.0.1UnavailableNone listed
5.9.0.0affectedcustom5.9.0.1UnavailableNone listed
5.10.0.0affectedcustom5.10.0.1UnavailableNone listed

WSO2 Identity Server

Vendor
WSO2
Product
WSO2 Identity Server
Platforms
Unknown
Default status
unaffected
WSO2 Identity Server · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom5.4.0.0UnavailableNone listed
5.4.0.0affectedcustom5.4.0.4UnavailableNone listed
5.4.1.0affectedcustom5.4.1.3UnavailableNone listed
5.5.0.0affectedcustom5.5.0.1UnavailableNone listed
5.6.0.0affectedcustom5.6.0.1UnavailableNone listed
5.7.0.0affectedcustom5.7.0.1UnavailableNone listed
5.8.0.0affectedcustom5.8.0.5UnavailableNone listed
5.9.0.0affectedcustom5.9.0.1UnavailableNone listed
5.10.0.0affectedcustom5.10.0.1UnavailableNone listed

WSO2 Identity Server Analytics

Vendor
WSO2
Product
WSO2 Identity Server Analytics
Platforms
Unknown
Default status
unaffected
WSO2 Identity Server Analytics · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom5.4.0.0UnavailableNone listed
5.4.0.0affectedcustom5.4.0.2UnavailableNone listed
5.4.1.0affectedcustom5.4.1.2UnavailableNone listed
5.5.0.0affectedcustom5.5.0.1UnavailableNone listed
5.6.0.0affectedcustom5.6.0.1UnavailableNone listed

WSO2 Message Broker

Vendor
WSO2
Product
WSO2 Message Broker
Platforms
Unknown
Default status
unaffected
WSO2 Message Broker · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom3.2.0.0UnavailableNone listed
3.2.0.0affectedcustom3.2.0.3UnavailableNone listed