WE
Product
WSO2 Enterprise Service Bus
3
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 2Low 0
Watch
Add WSO2 Enterprise Service Bus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-7074 | 6.8 | Jun 2 | Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Execution Affected: 4.9.0 before 4.9.0.10; 5.0.0 before 5.0.0.28 |
| CVE-2025-9955 | 5.7 | Oct 16 | Improper Access Control in WSO2 Enterprise Integrator Product via SOAP Admin Services for Logs and User-Store Configuration Affected: 5.0.0 before 5.0.0.29 |
Showing 2