wso2 Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by wso2
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
File Upload Vulnerability in WSO2 API
CVE-2026-3418Wso2Wso2 Api Manager9.1CRITICALXML External Entity Vulnerability in WSO2 SchemaValidator Mediator
CVE-2026-3415Wso2Wso2 Api Manager8.7HIGHMulti-Tenant Deployment Flaw in WSO2 Publisher APIs
CVE-2025-14561Wso2Wso2 Api Manager9CRITICALJWT Authentication Vulnerability in WSO2 Products
CVE-2026-5430Wso2Wso2 Universal Gateway10CRITICALInsufficient Token Restrictions in WSO2 Products Allow Low-privileged User Access
CVE-2026-1728Wso2Wso2 Api Manager9.8CRITICALConditional Authentication Bypass in WSO2 Product
CVE-2025-15039Wso2Wso2 Identity Server9.4CRITICALDenial of Service Vulnerability in WSO2 API Gateway Products
CVE-2026-4249Wso2Wso2 Universal Gateway8.6HIGHVulnerability in WSO2 API Manager's Message Flow Component Allows Destination Manipulation
CVE-2026-2053Wso2Wso2 Api Manager8.3HIGHDenial-of-Service Vulnerability in WSO2 Magic Link Authentication
CVE-2025-10470Wso2Wso2 Identity Server8.6HIGHAuthentication Bypass Vulnerability in WSO2 Products
CVE-2025-10908Wso2Wso2 Identity Server7.3HIGHXML Parser Vulnerability in WSO2 Products
CVE-2024-2374Wso2Wso2 Api Manager7.5HIGHAccount Provisioning Vulnerability in WSO2 Identity Server
CVE-2024-1524Wso2Wso2 Api Manager7.7HIGHFile Upload Vulnerability in WSO2 Products Exposing Remote Code Execution Risks
CVE-2025-13590Wso2Wso2 Api Manager9.1CRITICALVulnerability in WSO2 Server's Template Engine Exposes Sensitive Data to Attackers
CVE-2025-12107Wso2Wso2 Identity Server8.4HIGHMissing Authentication Enforcement in WSO2 Products
CVE-2025-9312Wso2Wso2 Api Manager9.8CRITICALCross-Site Request Forgery in WSO2 Products
CVE-2025-6670Wso2Wso2 Open Banking Am8.8HIGHArbitrary Code Execution Vulnerability in WSO2 Products
CVE-2025-11093Wso2Wso2 Micro Integrator8.4HIGHFile Upload Flaw in WSO2 Products Exposes Systems to Exploitation
CVE-2025-10907Wso2Wso2 Api Manager8.4HIGHImproper Privilege Management in WSO2 API Manager
CVE-2025-9152Wso2Wso2 Api Manager9.8CRITICALImproper Access Control in WSO2 Products
CVE-2025-9804Wso2Wso2 Identity Server A...8.9HIGHAccess Control Bypass in WSO2 Products
CVE-2025-10611Wso2Wso2 Api Manager9.8CRITICALAuthorization Flaw in WSO2 Products Allowing User Account Takeover
CVE-2024-6914Wso2Wso2 Api Manager8.8HIGHXML External Entity Vulnerability in WSO2 API Manager
CVE-2025-2905Wso2Wso2 Api Manager9.1CRITICALUser Impersonation Vulnerability in WSO2 Products
CVE-2023-6837Wso2Wso2 Api Manager8.5HIGHXML External Entity Vulnerability in WSO2 API Manager and Identity Server
CVE-2021-42646Wso2Api Manager9.1CRITICAL