WC
Product
WSO2 Carbon API Management API
2
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 1Low 0
Watch
Add WSO2 Carbon API Management API to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3418 | 9.1 | Aug 6 | Arbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code Execution Affected: 9.30.67 before 9.30.67.156 |
| CVE-2025-4760 | 4.8 | Sep 23 | Authenticated Stored Cross-Site Scripting (XSS) in Multiple WSO2 Products via API Document Upload in Publisher Affected: 6.7.206 before 6.7.206.559; 6.7.210 before 6.7.210.48; 9.20.74 before 9.20.74.365; 9.28.116 before 9.28.116.321; 9.29.120 before 9.29.120.163; 9.30.67 before 9.30.67.80; +1 more |
Showing 2