Advisories · Technology

WSO2 Carbon Registry Resources UI.

Every CVE that names WSO2 Carbon Registry Resources UI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-13394 CVE record

CVSS 5.4 Medium

Cross-Site Request Forgery via Ajax Processor Endpoints in Multiple WSO2 Products Enables Unauthorized Actions
- WSO2 Identity Server
- WSO2 API Manager
- Cross-site request forgery (CSRF)
Not analysed yet 6 Aug 2026
CVE-2024-3509 CVE record

CVSS 4.3 Medium

Stored Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products via Rich Text Editor
- WSO2 Enterprise Integrator
- WSO2 API Manager
- Cross-site scripting (XSS)
Not analysed yet 2 Jun 2025