OR
Product
org.wso2.carbon:org.wso2.carbon.base
3
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add org.wso2.carbon:org.wso2.carbon.base to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-10907 | 7.2 | Nov 5 | Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution Affected: 4.5.3 before 4.5.3.46; 4.6.0 before 4.6.0.2005; 4.6.1 before 4.6.1.153; 4.6.2 before 4.6.2.668; 4.6.3 before 4.6.3.37; 4.6.4 before 4.6.4.15; +8 more |
| CVE-2025-9804 | 6.5 | Oct 16 | Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs Affected: 4.4.7 before 4.4.7.6; 4.4.9 before 4.4.9.11; 4.4.11 before 4.4.11.9; 4.4.26 before 4.4.26.12; 4.4.35 before 4.4.35.44; 4.5.1 before 4.5.1.43; +15 more |
| CVE-2025-9955 | 5.7 | Oct 16 | Improper Access Control in WSO2 Enterprise Integrator Product via SOAP Admin Services for Logs and User-Store Configuration Affected: 4.4.8 before 4.4.8.7; 4.4.14 before 4.4.14.5; 4.4.16 before 4.4.16.9; 4.4.26 before 4.4.26.13; 4.4.32 before 4.4.32.16; 4.4.36 before 4.4.36.7; +4 more |
Showing 3