OR
Product
org.apache.synapse:synapse-core
by WSO2 · last CVE Nov 5, 2025
1
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch

Add org.apache.synapse:synapse-core to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-11093
7.2
0%
Nov 5
Arbitrary Code Execution with higher privileged users in Multiple WSO2 Products via Script Mediator Engines (GraalJS and NashornJS)
Affected: 2.1.7.wso2v227 before 2.1.7.wso2v227_99; 2.1.7.wso2v271 before 2.1.7.wso2v271_88; 2.1.7.wso2v143 before 2.1.7.wso2v143_121; 2.1.7.wso2v319 before 2.1.7.wso2v319_13; 2.1.7.wso2v183 before 2.1.7.wso2v183_72; 4.0.0.wso2v119 before 4.0.0.wso2v119_27; +5 more
Showing 1