Login Request a demo
WO
Product
WSO2 Open Banking AM
by WSO2 · last CVE Oct 28, 2026
40
CVEs
0
On KEV
9.8
Max CVSS
9
New 30D
Vulnerabilities40In the news0Timeline
Severity mix
Critical 8High 6Medium 23Low 3
Severity
All severities40Critical8High6Medium23Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WSO2 Open Banking AM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-9312
9.8
0%
Nov 18
Improper Certificate-Based Authentication Enforcement in Multiple WSO2 Products
Affected: 1.4.0 before 1.4.0.138; 1.5.0 before 1.5.0.139; 2.0.0 before 2.0.0.388
CVE-2025-10611
9.8
1%
Oct 16
Potential Broken Access Control in Multiple WSO2 Products via System REST APIs
Affected: 1.4.0 before 1.4.0.141; 1.5.0 before 1.5.0.142; 2.0.0 before 2.0.0.394
CVE-2024-6914
9.8
1%
May 22
Incorrect Authorization in Multiple WSO2 Products via Account Recovery SOAP Admin Service Leading to Account Takeover
Affected: 1.3.0 before 1.3.0.130; 1.4.0 before 1.4.0.133; 1.5.0 before 1.5.0.135; 2.0.0 before 2.0.0.341
CVE-2025-15039
9.4
1%
Aug 6
Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products
Affected: 1.4.0 before 1.4.0.143; 1.5.0 before 1.5.0.144; 2.0.0 before 2.0.0.405
CVE-2024-4457
9.1
0%
Oct 18
Remote Code Execution via JDBC User Store Configuration in Multiple WSO2 Products Allows Arbitrary Code Execution
Affected: 2.0.0 before 2.0.0.325
CVE-2024-2374
9.1
0%
Apr 16
XML External Entity Injection in Multiple WSO2 Products Allows Arbitrary file read and Denial of Service
Affected: 2.0.0 before 2.0.0.328
CVE-2025-10713
9.1
0%
Nov 5
XML External Entity (XXE) Vulnerability in Multiple WSO2 Products Due to Improper XML Parser Configuration
Affected: 2.0.0 before 2.0.0.393
CVE-2025-2905
9.1
1%
May 5
An XML External Entity (XXE) vulnerability in Multiple WSO2 Products
Affected: 1.5.0
Showing 8