WSO2 WSO2 Enterprise Mobility Manager
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-9804 | | Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs | CRITICAL 9.6 | 0.6 % | ||
| CVE-2024-7074 | 2.2.0 – < 2.2.0.27 | Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Execution | MEDIUM 6.8 | 18 % | ||
| CVE-2024-7097 | | Incorrect Authorization in Multiple WSO2 Products via SOAP Admin Service Allowing Unauthorized User Signup | MEDIUM 4.3 | 0.7 % | ||
| CVE-2024-7096 | 2.2.0 – < 2.2.0.26 | Privilege Escalation in Multiple WSO2 Products via SOAP Admin Service Due to Business Logic Flaw | MEDIUM 5.4 | 0.7 % |