WSO2 org.wso2.carbon:org.wso2.carbon.server.admin
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-9804 | | Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs | CRITICAL 9.6 | 0.6 % | ||
| CVE-2025-9955 | 4.4.8 – < 4.4.8.7 ; 4.4.14 – < 4.4.14.5 ; 4.4.16 – < 4.4.16.9 ; … | Improper Access Control in WSO2 Enterprise Integrator Product via SOAP Admin Services for Logs and User-Store Configuration | MEDIUM 5.7 | 0.2 % |