Login Request a demo
WO
Product
WSO2 Open banking KM
by WSO2 · last CVE Aug 6, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 4High 0Medium 4Low 0
Severity
All severities8Critical4High0Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WSO2 Open banking KM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-9312
9.8
0%
Nov 18
Improper Certificate-Based Authentication Enforcement in Multiple WSO2 Products
Affected: 1.4.0 before 1.4.0.132; 1.5.0 before 1.5.0.122
CVE-2025-10611
9.8
1%
Oct 16
Potential Broken Access Control in Multiple WSO2 Products via System REST APIs
Affected: 1.4.0 before 1.4.0.135; 1.5.0 before 1.5.0.125
CVE-2024-6914
9.8
1%
May 22
Incorrect Authorization in Multiple WSO2 Products via Account Recovery SOAP Admin Service Leading to Account Takeover
Affected: 1.3.0 before 1.3.0.113; 1.4.0 before 1.4.0.129; 1.5.0 before 1.5.0.119
CVE-2025-15039
9.4
1%
Aug 6
Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products
Affected: 1.4.0 before 1.4.0.137; 1.5.0 before 1.5.0.127
CVE-2025-9804
6.5
1%
Oct 16
Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs
Affected: 1.4.0 before 1.4.0.133; 1.5.0 before 1.5.0.123
CVE-2024-7073
6.5
0%
Jun 2
Unauthenticated Server-Side Request Forgery (SSRF) in Multiple WSO2 Products via SOAP Admin Services
Affected: 1.3.0 before 1.3.0.114; 1.4.0 before 1.4.0.130; 1.5.0 before 1.5.0.120
CVE-2024-7096
5.4
1%
May 30
Privilege Escalation in Multiple WSO2 Products via SOAP Admin Service Due to Business Logic Flaw
Affected: 1.3.0 before 1.3.0.114; 1.4.0 before 1.4.0.130; 1.5.0 before 1.5.0.120
CVE-2024-7097
4.3
1%
May 30
Incorrect Authorization in Multiple WSO2 Products via SOAP Admin Service Allowing Unauthorized User Signup
Affected: 1.3.0 before 1.3.0.114; 1.4.0 before 1.4.0.130; 1.5.0 before 1.5.0.120
Showing 8