WC
Product
WSO2 Carbon API Management API
by WSO2 · last CVE Aug 6, 2026
2
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 1Low 0
Watch

Add WSO2 Carbon API Management API to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-4760
4.8
0%
Sep 23
Authenticated Stored Cross-Site Scripting (XSS) in Multiple WSO2 Products via API Document Upload in Publisher
Affected: 6.7.206 before 6.7.206.559; 6.7.210 before 6.7.210.48; 9.20.74 before 9.20.74.365; 9.28.116 before 9.28.116.321; 9.29.120 before 9.29.120.163; 9.30.67 before 9.30.67.80; +1 more
Showing 1