WSO2 WSO2 Open Banking KM
8 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-15039 | | Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products | CRITICAL 9.4 | 0.7 % | ||
| CVE-2025-9312 | | Improper Certificate-Based Authentication Enforcement in Multiple WSO2 Products | CRITICAL 9.8 | 0.3 % | ||
| CVE-2025-9804 | 1.4.0 – < 1.4.0.133 ; 1.5.0 – < 1.5.0.123 | Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs | CRITICAL 9.6 | 0.6 % | ||
| CVE-2025-10611 | | Potential Broken Access Control in Multiple WSO2 Products via System REST APIs | CRITICAL 9.8 | 0.8 % | ||
| CVE-2024-7073 | 1.3.0 – < 1.3.0.114 ; 1.4.0 – < 1.4.0.130 ; 1.5.0 – < 1.5.0.120 | Unauthenticated Server-Side Request Forgery (SSRF) in Multiple WSO2 Products via SOAP Admin Services | MEDIUM 6.5 | 0.2 % | ||
| CVE-2024-7097 | 1.3.0 – < 1.3.0.114 ; 1.4.0 – < 1.4.0.130 ; 1.5.0 – < 1.5.0.120 | Incorrect Authorization in Multiple WSO2 Products via SOAP Admin Service Allowing Unauthorized User Signup | MEDIUM 4.3 | 0.7 % | ||
| CVE-2024-7096 | | Privilege Escalation in Multiple WSO2 Products via SOAP Admin Service Due to Business Logic Flaw | MEDIUM 5.4 | 0.7 % | ||
| CVE-2024-6914 | | Incorrect Authorization in Multiple WSO2 Products via Account Recovery SOAP Admin Service Leading to Account Takeover | CRITICAL 9.8 | 0.8 % |