WC
Product
WSO2 Carbon Registry Resources UI
2
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch
Add WSO2 Carbon Registry Resources UI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-13394 | 5.4 | Aug 6 | Cross-Site Request Forgery via Ajax Processor Endpoints in Multiple WSO2 Products Enables Unauthorized Actions Affected: 4.7.24 before 4.7.24.11; 4.7.32 before 4.7.32.16; 4.7.32 before 4.7.32.18; 4.7.33 before 4.7.33.16; 4.7.35 before 4.7.35.15; 4.7.39 before 4.7.39.12; +12 more |
| CVE-2024-3509 | 4.3 | Jun 2 | Stored Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products via Rich Text Editor Affected: 4.7.24 before 4.7.24.6; 4.7.32 before 4.7.32.10; 4.7.33 before 4.7.33.8; 4.7.35 before 4.7.35.8; 4.7.39 before 4.7.39.6; 4.7.51 before 4.7.51.2; +6 more |
Showing 2