Login Request a demo
WO
Product
WSO2 Open banking KM
by WSO2 · last CVE Aug 6, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 4High 0Medium 4Low 0
Severity
All severities8Critical4High0Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WSO2 Open banking KM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-9312
9.8
0%
Nov 18
Improper Certificate-Based Authentication Enforcement in Multiple WSO2 Products
Affected: 1.4.0 before 1.4.0.132; 1.5.0 before 1.5.0.122
CVE-2025-10611
9.8
1%
Oct 16
Potential Broken Access Control in Multiple WSO2 Products via System REST APIs
Affected: 1.4.0 before 1.4.0.135; 1.5.0 before 1.5.0.125
CVE-2024-6914
9.8
1%
May 22
Incorrect Authorization in Multiple WSO2 Products via Account Recovery SOAP Admin Service Leading to Account Takeover
Affected: 1.3.0 before 1.3.0.113; 1.4.0 before 1.4.0.129; 1.5.0 before 1.5.0.119
CVE-2025-15039
9.4
1%
Aug 6
Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products
Affected: 1.4.0 before 1.4.0.137; 1.5.0 before 1.5.0.127
Showing 4