OR
Product
org.wso2.carbon:org.wso2.carbon.base
by WSO2 · last CVE Nov 5, 2025
3
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch

Add org.wso2.carbon:org.wso2.carbon.base to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-10907
7.2
1%
Nov 5
Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution
Affected: 4.5.3 before 4.5.3.46; 4.6.0 before 4.6.0.2005; 4.6.1 before 4.6.1.153; 4.6.2 before 4.6.2.668; 4.6.3 before 4.6.3.37; 4.6.4 before 4.6.4.15; +8 more
Showing 1