Product by WSO2

    Wso2 Carbon API Management Implementation

    5 known vulnerabilities in Wso2 Carbon API Management Implementation (WSO2), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Wso2 Carbon API Management Implementation (WSO2)
    CriticalCVE-2026-3418

    Arbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code Execution

    also in 4 other products

    		9.1
    HighCVE-2026-3415

    WSO2 API Manager: XML Entity Expansion

    also in 4 other products

    		8.7
    CriticalCVE-2025-14561

    WSO2 API Manager: Improper Access Control

    also in 5 other products

    		9.0
    HighCVE-2025-8325

    Improper Access Control via Gateway API in Multiple WSO2 Products Allows Unauthorized Operations

    also in 9 other products

    		6.3
    HighCVE-2025-8154

    HTTP Header Injection via Webhook API in Multiple WSO2 Products Allows Response Header Manipulation

    also in 8 other products

    		5.3

    News

    All products by WSO2