Skip to contentWso2 vulnerabilities
Products
Show 7 moreShow less
Newest
- wso2 identity server, identity server as key manager +1 moreAn issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through...CVE-2020-144454.4 Medium
- wso2 identity server, identity server as key manager +1 moreAn issue was discovered in WSO2 Identity Server through 5.10.0 and WSO2 IS as Key Manager through...CVE-2020-144466.1 Medium
- wso2 api manager, api microgateway, identity server as key manager +2 moreIn WSO2 API Manager 3.0.0 and earlier, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5...CVE-2020-138835.5 Medium
- wso2 api managerWSO2 API Manager vulnerable to SSRFCVE-2020-132269.8 Critical
- wso2 api manager, api manager analytics, api microgateway +4 more +6 moreXXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and...CVE-2020-127198.7 High
- wso2 enterprise integratorWSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user (with admin...CVE-2020-118854.0 Medium
- snyk wso2 transport-http, wso2 transport-http +1 moreHTTP Response Splitting in WSO2 transport-httpCVE-2019-10797Fix available6.5 Medium
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting ...CVE-2019-204344.8 Medium
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0. A reflected XSS attack could be performed in...CVE-2019-204353.5 Low
- wso2 api manager, identity server +1 moreAn issue was discovered in WSO2 API Manager 2.6.0, WSO2 IS as Key Manager 5.7.0, and WSO2...CVE-2019-204376.1 Medium
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0. A potential stored Cross-Site Scripting (XSS)...CVE-2019-204384.8 Medium
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting ...CVE-2019-204393.5 Low
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting ...CVE-2019-204403.5 Low
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0. A potential Stored Cross-Site Scripting (XSS)...CVE-2019-204414.8 Medium
- wso2 api manager, enterprise integrator, identity server +2 moreAn issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as...CVE-2019-204423.5 Low
- wso2 api manager, enterprise integrator, identity server +2 moreAn issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as...CVE-2019-204433.5 Low
- wso2 api manager, identity server +1 moreAn issue was discovered in WSO2 API Manager 2.6.0, WSO2 IS as Key Manager 5.7.0, and WSO2...CVE-2019-204366.1 Medium
- wso2 enterprise integratorIn WSO2 Enterprise Integrator 6.5.0, reflected XSS occurs when updating the message processor...CVE-2019-195876.1 Medium
- wso2 identity serverWSO2 IS as Key Manager 5.7.0 allows unauthenticated reflected XSS in the dashboard user profile.CVE-2019-188816.1 Medium
- wso2 identity serverWSO2 IS as Key Manager 5.7.0 allows stored XSS in download-userinfo.jag because Content-Type is...CVE-2019-188826.1 Medium
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457. There is...CVE-2019-151083.5 Low
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0. It is possible for a logged-in user to upload,...CVE-2019-65135.4 Medium
- wso2 dashboard serverAn issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to force the application...CVE-2019-65165.8 Medium
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0. Uploaded documents for API documentation are...CVE-2019-65155.3 Medium
- wso2 dashboard serverAn issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to inject a JavaScript...CVE-2019-65144.8 Medium
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0. It is possible to force the application to...CVE-2019-65124.1 Medium
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.1.0 and 2.6.0. A DOM-based XSS exists in the store...CVE-2018-207365.4 Medium
- wso2 api manager, identity server, identity server as key manager +2 moreAn issue was discovered in WSO2 API Manager 2.1.0 and 2.6.0. Reflected XSS exists in the carbon...CVE-2018-207375.4 Medium
- wso2 identity serverWSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged...CVE-2018-8716Public exploitEPSS 38.1%5.4 Medium
- wso2 application server, business process server, business rules server +5 more +7 moreThe Management Console in WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2...CVE-2017-149956.1 Medium
- wso2 data analytics server, api manager, app manager +14 more +16 moreWSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via...CVE-2017-146514.8 Medium
- wso2 enablement server for javaCross-site scripting (XSS) vulnerability in WSO2 SOA Enablement Server for Java/6.6 build SSJ-6.6...CVE-2016-43276.1 Medium
- wso2 carbonWSO2 Carbon vulnerable to Cross-site ScriptingCVE-2016-4316Public exploit6.1 Medium
- wso2 carbonCross-site request forgery (CSRF) vulnerability in WSO2 Carbon 4.4.5 allows remote attackers to...CVE-2016-4315Public exploit5.7 Medium
- wso2 carbonWSO2 Carbon directory traversal vulnerabilityCVE-2016-4314Public exploitEPSS 12.4%4.9 Medium
- wso2 identity serverXML external entity (XXE) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0...CVE-2016-4312Public exploit7.5 High
- wso2 identity serverCross-site request forgery (CSRF) vulnerability in the XACML flow feature in WSO2 Identity Server...CVE-2016-4311Public exploit8.8 High