Login Request a demo
OB
Product
Open Banking KM
by Wso2 · last CVE Aug 6, 2026
On CISA KEVExploited in the wildRansomware-linked
9
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 5High 0Medium 4Low 0
Severity
All severities9Critical5High0Medium4Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Open Banking KM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-29464
RansomwareIn wildKEV
9.8
100%
Apr 18
WSO2 Multiple Products Unrestrictive Upload of File Vulnerability
Affected: 1.3.0 through 1.5.0
CVE-2025-9312
9.8
0%
Nov 18
A missing authentication enforcement vulnerability exists in the mutual TLS (mTLS) implementation used by System REST APIs and SOAP services in multiple WSO2 products
Affected: 1.4.0; 1.5.0
CVE-2025-10611
9.8
1%
Oct 16
Due to an insufficient access control implementation in multiple WSO2 Products, authentication and authorization checks for certain REST APIs can be bypassed, allowing them to be…
Affected: 1.4.0; 1.5.0
CVE-2024-6914
9.8
1%
May 22
An incorrect authorization vulnerability exists in multiple WSO2 products due to a business logic flaw in the account recovery-related SOAP admin service
Affected: 1.3.0; 1.4.0; 1.5.0
CVE-2025-15039
9.4
1%
Aug 6
Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products
Affected: 1.4.0 before 1.4.0.137; 1.5.0 before 1.5.0.127
CVE-2025-9804
6.5
1%
Oct 16
An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs
Affected: 1.4.0; 1.5.0
CVE-2024-7073
6.5
0%
Jun 2
A server-side request forgery (SSRF) vulnerability exists in multiple WSO2 products due to improper input validation in SOAP admin services
Affected: 1.3.0; 1.4.0; 1.5.0
CVE-2024-7096
5.4
1%
May 30
A privilege escalation vulnerability exists in multiple WSO2 products due to a business logic flaw in SOAP admin services
Affected: 1.3.0; 1.4.0; 1.5.0
CVE-2024-7097
4.3
1%
May 30
An incorrect authorization vulnerability exists in multiple WSO2 products due to a flaw in the SOAP admin service, which allows user account creation regardless of the…
Affected: 1.3.0; 1.4.0; 1.5.0
Showing 9