<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: wso2-open-banking-km</title><description>Every new CVE for wso2-open-banking-km.</description><link>https://agentprime.io/</link><item><title>CVE-2025-15039: Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products</title><link>https://agentprime.io/advisories/CVE-2025-15039/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-15039/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Aug 2026 07:33:23 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-9312: Improper Certificate-Based Authentication Enforcement in Multiple WSO2 Products</title><link>https://agentprime.io/advisories/CVE-2025-9312/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-9312/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Nov 2025 12:05:22 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-9804: Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs</title><link>https://agentprime.io/advisories/CVE-2025-9804/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-9804/</guid><description>CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Oct 2025 12:33:45 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-10611: Potential Broken Access Control in Multiple WSO2 Products via System REST APIs</title><link>https://agentprime.io/advisories/CVE-2025-10611/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-10611/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Oct 2025 12:09:31 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-7073: Unauthenticated Server-Side Request Forgery (SSRF) in Multiple WSO2 Products via SOAP Admin Services</title><link>https://agentprime.io/advisories/CVE-2024-7073/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-7073/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Jun 2025 16:38:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-7097: Incorrect Authorization in Multiple WSO2 Products via SOAP Admin Service Allowing Unauthorized User Signup</title><link>https://agentprime.io/advisories/CVE-2024-7097/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-7097/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 May 2025 15:04:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-6914: Incorrect Authorization in Multiple WSO2 Products via Account Recovery SOAP Admin Service Leading to Account Takeover</title><link>https://agentprime.io/advisories/CVE-2024-6914/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-6914/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 May 2025 18:26:15 GMT</pubDate><category>CVE</category><category>critical</category></item></channel></rss>