Advisories · Technology

WSO2 Enterprise Mobility Manager.

Every CVE that names WSO2 Enterprise Mobility Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-9804 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs
- WSO2 Identity Server as Key Manager
- WSO2 Identity Server
- Broken access control
Not analysed yet 16 Oct 2025
CVE-2024-7074 CVE record

CVSS 6.8 Medium

Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Execution
- WSO2 Enterprise Integrator
- WSO2 API Manager
- Unrestricted file upload
Not analysed yet 2 Jun 2025
CVE-2024-7097 CVE record

CVSS 4.3 Medium

Incorrect Authorization in Multiple WSO2 Products via SOAP Admin Service Allowing Unauthorized User Signup
- WSO2 Open Banking AM
- WSO2 Open Banking KM
- Broken access control
Not analysed yet 30 May 2025