CVE-2019-20443

An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. A potential stored Cross-Site Scripting (XSS) vulnerability in mediaType has been identified in the registry UI.

• CWE-79

• https://cybersecurityworks.com/zerodays/cve-2019-20443-wso2.htmlExploit, Third Party Advisory
• https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0636Vendor Advisory
• https://github.com/cybersecurityworks/Disclosed/issues/26Exploit, Third Party Advisory
• https://cybersecurityworks.com/zerodays/cve-2019-20443-wso2.htmlExploit, Third Party Advisory
• https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0636Vendor Advisory
• https://github.com/cybersecurityworks/Disclosed/issues/26Exploit, Third Party Advisory

Published

Jan 28, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-20438An issue was discovered in WSO2 API Manager 2.6.0. A potenti…4.8
• CVE-2019-20439An issue was discovered in WSO2 API Manager 2.6.0. A potenti…4.8
• CVE-2019-2044In MakeMP>G4VideoCodecSpecificData of APacketSource.cpp, the…
• CVE-2019-20440An issue was discovered in WSO2 API Manager 2.6.0. A potenti…4.8
• CVE-2019-20441An issue was discovered in WSO2 API Manager 2.6.0. A potenti…4.8
• CVE-2019-20442An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Ente…4.8
• CVE-2019-20444HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP…9.1
• CVE-2019-20445HttpObjectDecoder.java in Netty before 4.1.44 allows a Conte…9.1
• CVE-2019-20446In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file…6.5
• CVE-2019-20447Jobberbase 2.0 has SQL injection via the PATH_INFO to the jo…9.8
• CVE-2019-2045In JSCallTyper of typer.cc, there is an out of bounds write …
• CVE-2019-20451The HTTP API in Prismview System 9 11.10.17.00 and Prismview…9.8