WSO2 vulnerabilities
Every vulnerability this feed holds for WSO2, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
3 vulnerabilities tracked. 1 confirmed exploited in the wild. 1 with public exploit code.
- — WSO2 Multiple Products Path Traversal Vulnerability
- 9.4 The System REST APIs do not correctly enforce access control mechanisms, allowing users with lower privilege roles to execute…
- 4.8 The account lock feature fails to correctly enforce account lockouts on the primary user store when users with identical usernames exist in…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that WSO2 is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Microsoft Red Hat MediaTek, Inc. Apache Software Foundation Gitea WAVLINK Huawei Linux Cisco Citrix FFMPEG Unknown mathurvishal ag-ui-protocol n/a JFrog Plex Google Jovancoding beam-cloud MikroTik Oray Stephan Muelle Moxa