Advisories · Technology

WSO2 Carbon Synapse Artifact Uploader BE.

Every CVE that names WSO2 Carbon Synapse Artifact Uploader BE among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-7074 CVE record

CVSS 6.8 Medium

Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Execution
- WSO2 Enterprise Integrator
- WSO2 API Manager
- Unrestricted file upload
Not analysed yet 2 Jun 2025