Skip to contentWso2 Enterprise Service Bus vulnerabilities
- wso2 api manager, api manager analytics, api control plane +19 more +21 moreImproper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIsCVE-2025-98049.6 Critical
- wso2 enterprise integrator, enterprise service bus, org.wso2.carbon:org.wso2.carbon.base +1 more +3 moreImproper Access Control in WSO2 Enterprise Integrator Product via SOAP Admin Services for Logs and User-Store ConfigurationCVE-2025-99555.7 Medium
- wso2 api manager, carbon synapse artifact uploader be, enterprise integrator +4 more +6 moreAuthenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code ExecutionCVE-2024-7074EPSS 17.7%6.8 Medium
- wso2 api manager, enterprise integrator, enterprise service bus +2 more +4 moreAn XML External Entity (XXE) vulnerability in Multiple WSO2 ProductsCVE-2025-2905Fix available9.1 Critical