Product by WSO2

WSO2 Open Banking KM

9 known vulnerabilities in WSO2 Open Banking KM (WSO2), 1 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in WSO2 Open Banking KM (WSO2)

Critical	CVE-2022-29464	WSO2 Multiple Products Unrestrictive Upload of File Vulnerability In CISA KEVRansomwarealso in 7 other products	9.8	18.04.2022
Critical	CVE-2025-15039	Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products also in 18 other products	9.4	06.08.2026
Critical	CVE-2025-10611	Potential Broken Access Control in Multiple WSO2 Products via System REST APIs also in 17 other products	9.8	16.10.2025
Critical	CVE-2024-6914	WSO2 API Manager: Incorrect Authorization also in 11 other products	9.8	22.05.2025
Critical	CVE-2025-9804	WSO2 API Manager: Improper Access Control also in 24 other products	9.6	16.10.2025
Critical	CVE-2025-9312	Improper Certificate-Based Authentication Enforcement in Multiple WSO2 Products also in 17 other products	9.8	18.11.2025
Medium	CVE-2024-7096	Privilege Escalation in Multiple WSO2 Products via SOAP Admin Service Due to Business Logic Flaw also in 12 other products	4.2	30.05.2025
Medium	CVE-2024-7097	WSO2 Open Banking AM: Improper Access Control also in 12 other products	4.3	30.05.2025
Medium	CVE-2024-7073	Unauthenticated Server-Side Request Forgery (SSRF) in Multiple WSO2 Products via SOAP Admin Services also in 7 other products	6.5	02.06.2025