Login Request a demo
AM
Product
Api Manager Analytics
by Wso2 · last CVE Oct 16, 2025
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 0High 4Medium 7Low 0
Severity
All severities11Critical0High4Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Api Manager Analytics to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-24705
8.8
1%
Aug 27
An issue was discovered in certain WSO2 products
Affected: 2.5.0
CVE-2020-24703
8.8
1%
Aug 27
An issue was discovered in certain WSO2 products
Affected: 2.2.0
CVE-2023-6836
7.5
0%
Dec 15
Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely used feature of XML parsers to access…
Affected: 2.2.0; 2.5.0
CVE-2020-12719
7.2
1%
May 8
XXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and earlier, API Manager Analytics 2.5.0 and earlier, API Microgateway 2.2.0,…
Affected: through 2.5.0
CVE-2025-9804
6.5
1%
Oct 16
An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs
Affected: 2.0.0; 2.1.0; 2.2.0; 2.5.0
CVE-2020-24591
6.5
1%
Aug 21
The Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates
Affected: 2.2.0; 2.5.0
CVE-2022-29548
6.1
41%
Apr 21
A reflected XSS issue exists in the Management Console of several WSO2 products
Affected: 2.2.0; 2.5.0; 2.6.0
CVE-2020-17453
6.1
26%
Apr 5
WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter
Affected: 2.2.0; 2.5.0; 2.6.0
CVE-2020-24706
6.1
1%
Aug 27
An issue was discovered in certain WSO2 products
Affected: 2.5.0
CVE-2020-24704
6.1
1%
Aug 27
An issue was discovered in certain WSO2 products
Affected: 2.2.0
CVE-2023-6911
4.8
0%
Dec 18
Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can be carried out by an attacker injecting a…
Affected: 2.2.0; 2.5.0
Showing 11