CVE-2026-2445

The affected product accepts user-supplied input within a URL parameter without enforcing expected sanitization or encoding before rendering it within the response. This condition allows for the injection of malicious JavaScript payloads. An attacker can leverage this vulnerability to cause the user's browser to redirect to a malicious website, modify the user interface of the webpage, or retrieve sensitive information from the browser. However, the impact is mitigated for session hijacking as all session-related sensitive cookies are protected by the httpOnly flag.

CVSS v3 6.1 MEDIUM

6.1^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5059/

Configurations

No configuration.

History

20 Jul 2026, 08:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-07-20 08:16

Updated : 2026-07-23 15:27

NVD link : CVE-2026-2445

Mitre link : CVE-2026-2445

CVE.ORG link : CVE-2026-2445

JSON object : View

Products Affected

No product.

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2026-2445", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-2445", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-20T13:52:47.520347Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "affected": [{"source": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "affectedData": [{"vendor": "WSO2", "product": "WSO2 API Manager", "versions": [{"status": "affected", "version": "4.2.0", "lessThan": "4.2.0.195", "versionType": "custom"}, {"status": "affected", "version": "4.3.0", "lessThan": "4.3.0.106", "versionType": "custom"}, {"status": "affected", "version": "4.4.0", "lessThan": "4.4.0.70", "versionType": "custom"}, {"status": "affected", "version": "4.5.0", "lessThan": "4.5.0.55", "versionType": "custom"}, {"status": "affected", "version": "4.6.0", "lessThan": "4.6.0.19", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 API Control Plane", "versions": [{"status": "affected", "version": "4.5.0", "lessThan": "4.5.0.56", "versionType": "custom"}, {"status": "affected", "version": "4.6.0", "lessThan": "4.6.0.20", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Identity Server", "versions": [{"status": "affected", "version": "6.0.0", "lessThan": "6.0.0.263", "versionType": "custom"}, {"status": "affected", "version": "6.1.0", "lessThan": "6.1.0.266", "versionType": "custom"}, {"status": "affected", "version": "7.0.0", "lessThan": "7.0.0.144", "versionType": "custom"}, {"status": "affected", "version": "7.1.0", "lessThan": "7.1.0.53", "versionType": "custom"}, {"status": "affected", "version": "7.2.0", "lessThan": "7.2.0.12", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-20T08:16:30.143", "references": [{"url": "https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5059/", "source": "ed10eef1-636d-4fbe-9993-6890dfa878f8"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "The affected product accepts user-supplied input within a URL parameter without enforcing expected sanitization or encoding before rendering it within the response. This condition allows for the injection of malicious JavaScript payloads.\n\nAn attacker can leverage this vulnerability to cause the user's browser to redirect to a malicious website, modify the user interface of the webpage, or retrieve sensitive information from the browser. However, the impact is mitigated for session hijacking as all session-related sensitive cookies are protected by the httpOnly flag."}], "lastModified": "2026-07-23T15:27:53.473", "sourceIdentifier": "ed10eef1-636d-4fbe-9993-6890dfa878f8"}