Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
wso2 api manager vulnerabilities and exploits
(subscribe to this query)
5.3
CVSSv3
CVE-2023-6839
Due to improper error handling, a REST API resource could expose a server side error containing an internal WSO2 specific package name in the HTTP response.
Wso2 Api Manager 3.0.0
Wso2 Api Manager 3.1.0
Wso2 Api Manager 4.0.0
Wso2 Api Manager 3.2.0
5.3
CVSSv3
CVE-2023-6835
Multiple WSO2 products have been identified as vulnerable due to lack of server-side input validation in the Forum feature, API rating could be manipulated.
Wso2 Api Manager 2.6.0
Wso2 Api Manager 2.2.0
Wso2 Api Manager 2.5.0
Wso2 Iot Server 3.3.1
6.5
CVSSv3
CVE-2020-24591
The Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates. This affects API Manager up to and including 3.0.0, API Manager Analytics 2.2.0 and 2.5.0, API Microgateway 2.2.0, Enterprise Integrator 6.2.0 and 6.3.0, and Identity Server Analytics...
Wso2 Api Manager
Wso2 Api Manager Analytics 2.2.0
Wso2 Api Manager Analytics 2.5.0
Wso2 Api Microgateway 2.2.0
Wso2 Enterprise Integrator 6.2.0
Wso2 Enterprise Integrator 6.3.0
Wso2 Identity Server Analytics
9.1
CVSSv3
CVE-2021-42646
XML External Entity (XXE) vulnerability in the file based service provider creation feature of the Management Console in WSO2 API Manager 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; and WSO2 IS as Key Manager 5.7.0, 5.9.0, and 5.10.0; and WSO2 Identity Server 5.7.0, 5.8.0, 5.9.0, 5.10...
Wso2 Api Manager 2.6.0
Wso2 Identity Server 5.7.0
Wso2 Identity Server As Key Manager 5.7.0
Wso2 Identity Server 5.8.0
Wso2 Api Manager 3.0.0
Wso2 Api Manager 3.1.0
Wso2 Identity Server As Key Manager 5.9.0
Wso2 Identity Server As Key Manager 5.10.0
Wso2 Identity Server 5.11.0
Wso2 Api Manager 4.0.0
Wso2 Api Manager 3.2.0
Wso2 Identity Server 5.9.0
Wso2 Identity Server 5.10.0
7.2
CVSSv3
CVE-2020-12719
XXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and previous versions, API Manager Analytics 2.5.0 and previous versions, API Microgateway 2.2.0, Enterprise Integrator 6.4.0 and previous versions, IS as Key Manager 5.9.0 and previous ...
Wso2 Api Manager
Wso2 Api Manager Analytics
Wso2 Api Microgateway 2.2.0
Wso2 Enterprise Integrator
Wso2 Identity Server
Wso2 Identity Server Analytics
Wso2 Identity Server As Key Manager
8.2
CVSSv3
CVE-2023-6837
Multiple WSO2 products have been identified as vulnerable to perform user impersonatoin using JIT provisioning. In order for this vulnerability to have any impact on your deployment, following conditions must be met: * An IDP configured for federated authentication and JIT provis...
Wso2 Api Manager 2.6.0
Wso2 Api Manager 3.0.0
Wso2 Api Manager 3.1.0
Wso2 Api Manager 4.0.0
Wso2 Api Manager 3.2.0
Wso2 Api Manager 2.5.0
Wso2 Identity Server 5.7.0
Wso2 Identity Server 5.8.0
Wso2 Identity Server 5.11.0
Wso2 Identity Server 5.9.0
Wso2 Identity Server 5.10.0
Wso2 Identity Server 5.6.0
Wso2 Identity Server As Key Manager 5.7.0
Wso2 Identity Server As Key Manager 5.6.0
Wso2 Identity Server As Key Manager 5.9.0
Wso2 Identity Server As Key Manager 5.10.0
6.1
CVSSv3
CVE-2022-29548
A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator...
Wso2 Api Manager 2.6.0
Wso2 Identity Server 5.7.0
Wso2 Identity Server As Key Manager 5.7.0
Wso2 Enterprise Integrator 6.5.0
Wso2 Api Microgateway 2.2.0
Wso2 Api Manager 3.0.0
Wso2 Enterprise Integrator 6.2.0
Wso2 Enterprise Integrator 6.3.0
Wso2 Api Manager Analytics 2.2.0
Wso2 Api Manager Analytics 2.5.0
Wso2 Identity Server 5.5.0
Wso2 Identity Server Analytics 5.5.0
Wso2 Data Analytics Server 3.2.0
Wso2 Identity Server As Key Manager 5.5.0
Wso2 Api Manager 2.2.0
Wso2 Api Manager 3.1.0
Wso2 Micro Integrator 1.0.0
Wso2 Identity Server Analytics 5.6.0
Wso2 Identity Server As Key Manager 5.6.0
Wso2 Identity Server As Key Manager 5.9.0
Wso2 Identity Server As Key Manager 5.10.0
Wso2 Api Manager Analytics 2.6.0
1 Github repository
6.7
CVSSv3
CVE-2020-13883
In WSO2 API Manager 3.0.0 and previous versions, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5.9.0 and previous versions, Management Console allows XXE during addition or update of a Lifecycle.
Wso2 Api Manager
Wso2 Api Microgateway 2.2.0
Wso2 Identity Server As Key Manager
9.1
CVSSv3
CVE-2020-24590
The Management Console in WSO2 API Manager up to and including 3.1.0 and API Microgateway 2.2.0 allows XML Entity Expansion attacks.
Wso2 Api Manager
Wso2 Api Microgateway 2.2.0
9.1
CVSSv3
CVE-2020-24589
The Management Console in WSO2 API Manager up to and including 3.1.0 and API Microgateway 2.2.0 allows XML External Entity injection (XXE) attacks.
Wso2 Api Manager
Wso2 Api Microgateway 2.2.0
1 Github repository
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4761
command injection
CVE-2024-3676
IDOR
CVE-2024-30039
CVE-2024-32113
CVE-2024-30049
CVE-2024-4776
SQL injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »