Advisories · Technology

WSO2 IoT.

Every CVE that names WSO2 IoT among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-6914 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Incorrect Authorization in Multiple WSO2 Products via Account Recovery SOAP Admin Service Leading to Account Takeover
- WSO2 API Manager
- WSO2 Governance Registry
- Broken access control
Not analysed yet 22 May 2025