Advisories · Technology
WSO2 Enterprise Service Bus.
Every CVE that names WSO2 Enterprise Service Bus among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.7 Medium
Improper Access Control in WSO2 Enterprise Integrator Product via SOAP Admin Services for Logs and User-Store Configuration
- WSO2 Enterprise Integrator
- WSO2 Enterprise Service Bus
- Broken access control
- CVSS 6.8 Medium
Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Execution
- WSO2 Enterprise Integrator
- WSO2 API Manager
- Unrestricted file upload