Advisories · Technology
WSO2 Carbon API Gateway.
Every CVE that names WSO2 Carbon API Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
XML External Entity (XXE) Injection via Schema Validation in Multiple WSO2 Products Allows File Reading and Denial of Service
- WSO2 API Manager
- WSO2 Universal Gateway
- Denial of service
- CVSS 5.3 Medium
HTTP Header Injection via Webhook API in Multiple WSO2 Products Allows Response Header Manipulation
- WSO2 API Manager
- WSO2 Universal Gateway
- Other injection