OR
Product
org.wso2.carbon:org.wso2.carbon.ui
by WSO2 · last CVE Nov 18, 2025
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch

Add org.wso2.carbon:org.wso2.carbon.ui to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-6670
8.8
0%
Nov 18
Cross-Site Request Forgery (CSRF) in Multiple WSO2 Products via HTTP GET in Admin Services
Affected: 4.5.3 before 4.5.3.50; 4.6.0 before 4.6.0.2253; 4.6.1 before 4.6.1.157; 4.6.2 before 4.6.2.673; 4.6.3 before 4.6.3.41; 4.6.4 before 4.6.4.22; +10 more
Showing 1