Login Request a demo
OB
Product
Open Banking Iam
by Wso2 · last CVE Sep 3, 2026
On CISA KEVExploited in the wildRansomware-linked
33
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities33In the news0Timeline
Severity mix
Critical 7High 6Medium 18Low 2
Severity
All severities33Critical7High6Medium18Low2
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Open Banking Iam to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-6670
8.8
0%
Nov 18
Cross-Site Request Forgery (CSRF) in Multiple WSO2 Products via HTTP GET in Admin Services
Affected: 2.0.0
CVE-2025-12737
8.4
0%
Sep 3
Arbitrary Code Execution via Administrative Operations in Multiple WSO2 Products Allows Remote Code Execution
Affected: 2.0.0 before 2.0.0.418
CVE-2024-6832
7.5
0%
Aug 6
Account Lockout Failure via Secondary User Store Inaccessibility in Multiple WSO2 Products Allows Brute Force Attacks
Affected: 2.0.0
CVE-2025-10907
7.2
1%
Nov 5
Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution
Affected: 2.0.0
CVE-2025-3125
7.2
1%
Nov 5
Authenticated Arbitrary File Upload in Multiple WSO2 Products via CarbonAppUploader Admin Service Leading to Remote Code Execution
Affected: 2.0.0
CVE-2025-1862
7.2
1%
Sep 26
Authenticated Arbitrary File Upload in Multiple WSO2 Products via BPEL Uploader SOAP Service Leading to Remote Code Execution
Affected: 2.0.0
Showing 6