WC
Product
WSO2 Carbon API Gateway
2
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add WSO2 Carbon API Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3415 | 8.7 | Aug 6 | XML External Entity (XXE) Injection via Schema Validation in Multiple WSO2 Products Allows File Reading and Denial of Service Affected: 6.7.206 before 6.7.206.594; 6.7.210 before 6.7.210.95; 9.20.74 before 9.20.74.398; 9.28.116 before 9.28.116.412; 9.29.120 before 9.29.120.228; 9.30.67 before 9.30.67.158; +2 more |
| CVE-2025-8154 | 7.5 | May 11 | HTTP Header Injection via Webhook API in Multiple WSO2 Products Allows Response Header Manipulation Affected: 9.20.74 before 9.20.74.374; 9.28.116 before 9.28.116.363; 9.29.120 before 9.29.120.181; 9.30.67 before 9.30.67.104; 9.31.86 before 9.31.86.64 |
Showing 2