Login Request a demo
OB
Product
Open Banking KM
by Wso2 · last CVE Aug 6, 2026
On CISA KEVExploited in the wildRansomware-linked
9
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 5High 0Medium 4Low 0
Severity
All severities9Critical5High0Medium4Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Open Banking KM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-9804
6.5
1%
Oct 16
An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs
Affected: 1.4.0; 1.5.0
CVE-2024-7073
6.5
0%
Jun 2
A server-side request forgery (SSRF) vulnerability exists in multiple WSO2 products due to improper input validation in SOAP admin services
Affected: 1.3.0; 1.4.0; 1.5.0
CVE-2024-7096
5.4
1%
May 30
A privilege escalation vulnerability exists in multiple WSO2 products due to a business logic flaw in SOAP admin services
Affected: 1.3.0; 1.4.0; 1.5.0
CVE-2024-7097
4.3
1%
May 30
An incorrect authorization vulnerability exists in multiple WSO2 products due to a flaw in the SOAP admin service, which allows user account creation regardless of the…
Affected: 1.3.0; 1.4.0; 1.5.0
Showing 4