wso2
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 150 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 16, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Arbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code Execution
XML External Entity (XXE) Injection via Schema Validation in Multiple WSO2 Products Allows File Reading and Denial of Service
Access Control Bypass via Publisher REST APIs in Multiple WSO2 Products Allows Cross-Tenant Operations
Improper Token Revocation via SOAP Services in Multiple WSO2 Products Allows Retained Access Privileges
User Interface Misrepresentation via Swagger UI Try-out Console in WSO2 API Manager Allows Sensitive Information Exposure or Unintended Requests
Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover
Privilege Escalation via System REST APIs in Multiple WSO2 Products Permits Admin Account Takeover
Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products
Sensitive Information Disclosure via Event Publisher Logging in Multiple WSO2 Products
Cross-Site Request Forgery via Ajax Processor Endpoints in Multiple WSO2 Products Enables Unauthorized Actions
Monitor wso2 in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.