Vendor

WSO2

131 known vulnerabilities.

Products

WSO2 API Manager 95 WSO2 Identity Server 88 WSO2 Identity Server as Key Manager 54 WSO2 API Control Plane 51 WSO2 Open Banking IAM 51 WSO2 Open Banking AM 45 WSO2 Universal Gateway 40 WSO2 Traffic Manager 40 WSO2 Enterprise Integrator 29 WSO2 Carbon OAuth 8 WSO2 Open Banking KM 8 WSO2 Micro Integrator 7 WSO2 Carbon API Management Implementation 6 WSO2 Carbon User Manager Kernel 5 WSO2 Carbon API Manager Rest API Utility 5 WSO2 Carbon Identity Application Authentication Framework 5 WSO2 Enterprise Mobility Manager 4 WSO2 Carbon Identity User Store Configuration UI 3 org.wso2.carbon:org.wso2.carbon.ui 3 WSO2 Enterprise Service Bus 3 org.wso2.carbon:org.wso2.carbon.base 3 WSO2 Carbon MagicLink Authenticator Module 3 WSO2 IS as Key Manager 3 Email OTP Authenticator 3 WSO2 Carbon Registry Resources UI 2 WSO2 Carbon Identity Management 2 WSO2 Carbon API Management API 2 WSO2 Carbon API Gateway 2 WSO2 Carbon API Manager Rest API Common Functions 2 WSO2 Carbon User Management UI 2 org.wso2.carbon:org.wso2.carbon.server.admin 2 WSO2 Carbon Identity Recovery Management 2 WSO2 API Manager Analytics 2 carbon-registry 2 WSO2 API Microgateway 2 WSO2 Identity Server Analytics 2 WSO2 Data Analytics Server 2 WSO2 Carbon Abstract OTP Authenticator 2 WSO2 Identity Server Keystore Rest API Commons 1 WSO2 Identity Server Keystore Rest API V1 1

All Critical High Medium Low Exploited only Public exploit

83 results · Clear filters · Feed

Medium 6.1

CVE-2023-6838

Reflected XSS vulnerability can be exploited by tampering a request parameter in Authentication Endpoint. This can be p…

WSO2 WSO2 API Manager WSO2 Identity Server WSO2 IS as Key Manager

Dec 15, 2023
Medium 4.6

CVE-2023-6836

WSO2 products vulnerable to XML External Entity attack

Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely used feature of XML parsers to access sensitive information.

WSO2 WSO2 API Manager WSO2 Identity Server WSO2 Enterprise Integrator Maven

Dec 15, 2023
Medium 4.3

CVE-2023-6835

WSO2 API Manager allows attackers to change the API rating

Multiple WSO2 products have been identified as vulnerable due to lack of server-side input validation in the Forum feature, API rating could be manipulated.

WSO2 WSO2 API Manager WSO2 IoT Server org.wso2.carbon.apimgt:forum Maven

Dec 15, 2023