OR
Product
org.wso2.carbon:org.wso2.carbon.ui
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add org.wso2.carbon:org.wso2.carbon.ui to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-6670 | 8.8 | Nov 18 | Cross-Site Request Forgery (CSRF) in Multiple WSO2 Products via HTTP GET in Admin Services Affected: 4.5.3 before 4.5.3.50; 4.6.0 before 4.6.0.2253; 4.6.1 before 4.6.1.157; 4.6.2 before 4.6.2.673; 4.6.3 before 4.6.3.41; 4.6.4 before 4.6.4.22; +10 more |
| CVE-2025-5605 | 5.3 | Oct 24 | Authentication Bypass via URI Manipulation in Multiple WSO2 Products' Management Console Leading to Partial Information Disclosure Affected: 4.5.3 before 4.5.3.40; 4.6.0 before 4.6.0.1224; 4.6.1 before 4.6.1.150; 4.6.2 before 4.6.2.664; 4.6.3 before 4.6.3.32; 4.6.4 before 4.6.4.8; +8 more |
| CVE-2025-5350 | 4.8 | Oct 24 | SSRF and Reflected XSS Vulnerability in Deprecated Try-It Feature of Multiple WSO2 Products Affected: 4.5.3 before 4.5.3.41; 4.6.0 before 4.6.0.1087; 4.6.1 before 4.6.1.151; 4.6.2 before 4.6.2.672; 4.6.3 before 4.6.3.30; 4.6.4 before 4.6.4.7; +8 more |
Showing 3