Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Wso2
Org.wso2.carbon.commons:org.wso2.carbon.application.upload
Wso2 Org.wso2.carbon.commons:org.wso2.carbon.application.upload vulnerabilities
Any severity
Critical
High or worse
Medium or worse
Low or worse
Any EPSS
EPSS 10% or more
EPSS 50% or more
EPSS 90% or more
Known exploited
In KEV
Public exploit
Fix available
Apply
wso2
api control plane
,
api manager
,
enterprise integrator
+6 more
+8 more
Authenticated Arbitrary File Upload in Multiple WSO2 Products via CarbonAppUploader Admin Service Leading to Remote Code Execution
CVE-2025-3125
6.7
Medium
November 5, 2025
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open