WA
Product
WSO2 API Manager
On CISA KEVExploited in the wild
46
CVEs
1
On KEV
10.0
Max CVSS
11
New 30D
Severity mix
Critical 8High 11Medium 25Low 2
Watch
Add WSO2 API Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-13736 | 3.7 | Aug 6 | Username Enumeration via Login Interface in Multiple WSO2 Products Allows User Account Discovery Affected: 3.1.0 before 3.1.0.351; 3.2.0 before 3.2.0.455; 4.0.0 before 4.0.0.375 |
| CVE-2024-4412 | 2.7 | Oct 19 | Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations Affected: 3.1.0 before 3.1.0.276; 3.2.0 before 3.2.0.366; 3.2.1 before 3.2.1.18; 4.0.0 before 4.0.0.307; 4.1.0 before 4.1.0.169; 4.2.0 before 4.2.0.108; +1 more |
Showing 2