Wso2 Api Manager Analytics vulnerabilities

• wso2 api manager, api manager analytics, api control plane +19 more +21 more Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs CVE-2025-9804 9.6 CriticalOctober 16, 2025
• wso2 api manager, api manager analytics, api microgateway +7 more +9 more WSO2 Registry Stored Cross Site Scripting (XSS) vulnerability CVE-2023-6911 Fix available 4.8 MediumDecember 18, 2023
• wso2 api manager, api manager analytics, api microgateway +5 more +7 more WSO2 products vulnerable to XML External Entity attack CVE-2023-6836 Fix available 4.6 MediumDecember 15, 2023
• wso2 api manager, api manager analytics, api microgateway +6 more +8 more A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API... CVE-2022-29548 Public exploit EPSS 41.1% 4.6 MediumApril 21, 2022
• wso2 api manager, api manager analytics, api microgateway +5 more +7 more WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter. CVE-2020-17453 Public exploit EPSS 26.2% 6.1 MediumApril 5, 2021
• wso2 api manager, api manager analytics, identity server +3 more +5 more An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This... CVE-2020-24706 6.1 MediumAugust 27, 2020
• wso2 api manager, api manager analytics, identity server +3 more +5 more An issue was discovered in certain WSO2 products. A valid Carbon Management Console session... CVE-2020-24705 8.8 HighAugust 27, 2020
• wso2 api manager, api manager analytics, api microgateway +6 more +8 more An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This... CVE-2020-24704 6.1 MediumAugust 27, 2020
• wso2 api manager, api manager analytics, api microgateway +6 more +8 more An issue was discovered in certain WSO2 products. A valid Carbon Management Console session... CVE-2020-24703 8.8 HighAugust 27, 2020
• wso2 api manager, api manager analytics, api microgateway +2 more +4 more The Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates.... CVE-2020-24591 6.5 MediumAugust 21, 2020
• wso2 api manager, api manager analytics, api microgateway +4 more +6 more XXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and... CVE-2020-12719 8.7 HighMay 7, 2020