Login Request a demo
AM
Product
API Manager Analytics
by WSO2 · last CVE Oct 16, 2025
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 0High 4Medium 7Low 0
Severity
All severities11Critical0High4Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add API Manager Analytics to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-9804
6.5
1%
Oct 16
Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs
Affected: 2.0.0 before 2.0.0.14; 2.1.0 before 2.1.0.19; 2.2.0 before 2.2.0.30; 2.5.0 before 2.5.0.39
CVE-2020-24591
6.5
1%
Aug 21
The Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates
Affected: 2.2.0; 2.5.0
CVE-2022-29548
6.1
41%
Apr 21
A reflected XSS issue exists in the Management Console of several WSO2 products
Affected: 2.2.0; 2.5.0; 2.6.0
CVE-2020-17453
6.1
26%
Apr 5
WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter
Affected: 2.2.0; 2.5.0; 2.6.0
CVE-2020-24706
6.1
1%
Aug 27
An issue was discovered in certain WSO2 products
Affected: 2.5.0
CVE-2020-24704
6.1
1%
Aug 27
An issue was discovered in certain WSO2 products
Affected: 2.2.0
CVE-2023-6911
4.8
0%
Dec 18
Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can be carried out by an attacker injecting a…
Affected: 2.2.0; 2.5.0
Showing 7