VULNERABILITY INTELLIGENCE

CVE-2019-18882

CVSS score6.1 MEDIUM

EPSS probability0.64%

CISA KEVNot currently listed

Published2019-11-12

Last modified2026-06-17

Description

WSO2 IS as Key Manager 5.7.0 allows stored XSS in download-userinfo.jag because Content-Type is mishandled.