WSO2 Vulnerabilities
25 vulnerabilities related to WSO2
- PoC2026-04-16CVE-2025-5350: WSO2 - Server Side Request Forgery
- 2026-03-11WSO2 Management 存在SSRF漏洞(CVE-2025-5350)
- 2025-11-05（CVE-2025-3125）WSO2多个产品任意文件上传漏洞
- 2025-08-21WSO2 API Manager /carbon/generic/save_artifact_ajaxprocessor.jsp XML 外部实体注入漏洞（CVE-2020-24589）
- 2025-08-21WSO2 API Manager /carbon/generic/save_artifact_ajaxprocessor.jsp XML 外部实体注入漏洞（CVE-2020-24589）
- PoC2025-08-01CVE-2017-14651: WSO2 Data Analytics Server 3.1.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2020-17453: WSO2 Carbon Management Console <=5.10 - Cross-Site Scripting
- PoC2025-08-01CVE-2020-24589: WSO2 API Manager <=3.1.0 - Blind XML External Entity Injection
- PoC2025-08-01CVE-2022-29464: WSO2 Management - Arbitrary File Upload & Remote Code Execution
- PoC2025-08-01CVE-2022-29548: WSO2 - Cross-Site Scripting
- PoC2025-08-01CVE-2024-7097: WSO2 User Registration - Arbitrary Account Creation
- PoC2025-08-01CVE-2022-29464: WSO2 Management - Arbitrary File Upload & Remote Code Execution
- PoC2025-08-01wso2-default-login: WSO2 Management Console Default Login
- PoC2025-08-01wso2-default-login: WSO2 Management Console Default Login
- PoC2025-08-01WSO2-2019-0598: WSO2 <5.8.0 - Server Side Request Forgery
- PoC2025-08-01CVE-2025-5605: WSO2 Management Console - Authentication Bypass
- 2024-02-27WSO2 API Manager 系统 save_artifact_ajaxprocessor.jsp XXE 漏洞（CVE-2020-24589）
- 2024-02-22WSO2 Management CVE-2022-29548跨站脚本漏洞
- 2024-02-22Certain WSO2 CVE-2022-29464远程代码执行漏洞
- 2024-02-22WSO2 Enterprise Integrator 反射型跨站脚本漏洞
- 2023-07-26WSO2 Carbon /shindig/gadgets/proxy SSRF漏洞
- 2022-05-16WSO2 Management XSS(CVE-2022-29548)
- 2022-05-05WSO2 fileupload 任意文件上传漏洞
- 2022-04-26WSO2 proxy SSRF漏洞
- 2022-04-21WSO2 API Manager远程命令执行漏洞(CVE-2022-29464)