wso2 Summary
Latest vulnerabilities published by wso2
Vulnerability Published:
ποΈ Published
- Anytime
Sort By:
ποΈ Published Date
- Descending
File Upload Vulnerability in WSO2 API
CVE-2026-3418Wso2Wso2 Api Manager9.1CRITICALXML External Entity Vulnerability in WSO2 SchemaValidator Mediator
CVE-2026-3415Wso2Wso2 Api Manager8.7HIGHMulti-Tenant Deployment Flaw in WSO2 Publisher APIs
CVE-2025-14561Wso2Wso2 Api Manager9CRITICALAuthentication Token Vulnerability in WSO2 Platform
CVE-2025-12317Wso2Wso2 Enterprise Integr...5MEDIUMAPI Publisher Vulnerability in WSO2 Product
CVE-2025-6508Wso2Wso2 Api Manager4.3MEDIUMAuthentication Bypass in WSO2 Products by WSO2
CVE-2024-6541Wso2Wso2 Micro Integrator6.8MEDIUMJWT Authentication Vulnerability in WSO2 Products
CVE-2026-5430Wso2Wso2 Universal Gateway10CRITICALInsufficient Token Restrictions in WSO2 Products Allow Low-privileged User Access
CVE-2026-1728Wso2Wso2 Api Manager9.8CRITICALConditional Authentication Bypass in WSO2 Product
CVE-2025-15039Wso2Wso2 Identity Server9.4CRITICALInformation Disclosure Vulnerability in WSO2 Event Publisher
CVE-2026-0637Wso2Wso2 Api Manager4.4MEDIUMCSRF Vulnerability in Carbon Console by WSO2
CVE-2025-13394Wso2Wso2 Identity Server5.4MEDIUMData Exposure Vulnerability in WSO2 Authentication Methods
CVE-2025-13909Wso2Wso2 Identity Server4.3MEDIUMUser Impersonation Vulnerability in WSO2 Identity Server
CVE-2025-12627Wso2Wso2 Identity Server2.4LOWAccess Control Issue in WSO2 Secret Type Management API
CVE-2025-14779Wso2Wso2 Identity Server3.8LOWUser Store Configuration Issue in WSO2 Identity Server
CVE-2025-11850Wso2Wso2 Identity Server4.3MEDIUMAccount Enumeration Vulnerability in WSO2 Identity Server
CVE-2025-13736Wso2Wso2 Identity Server A...3.7LOWUser Input Validation Flaw in WSO2 Products
CVE-2024-10302Wso2Wso2 Api Control Plane4MEDIUMAccount Locking Bypass in WSO2 Identity Server
CVE-2024-6832Wso2Wso2 Enterprise Integr...5.9MEDIUMVulnerability in WSO2 Product Affecting Authorization Code Management
CVE-2024-8995Wso2Wso2 Api Manager4.9MEDIUMInjection Flaw in WSO2 Product Exposes Users to Malicious Payloads
CVE-2026-2445Wso2Wso2 Api Manager6.1MEDIUMDenial of Service Vulnerability in WSO2 API Gateway Products
CVE-2026-4249Wso2Wso2 Universal Gateway8.6HIGHCross-Site Scripting Vulnerability in WSO2 API Management Software
CVE-2025-8591Wso2Wso2 Identity Server6.1MEDIUMFederated Authentication Role Overwrite in WSO2 Products
CVE-2024-1248Wso2Wso2 Api Manager4.8MEDIUMCross-Tenant Consent Sharing Vulnerability in WSO2 SaaS Applications
CVE-2025-13475Wso2Wso2 Identity Server3.5LOWVulnerability in WSO2 API Manager's Message Flow Component Allows Destination Manipulation
CVE-2026-2053Wso2Wso2 Api Manager8.3HIGH