WSO2 WSO2 Open Banking IAM

Name: WSO2 WSO2 Open Banking IAM
Brand: WSO2

ProduktEU

Ein im Bedrohungsgraphen erfasstes Produkt; die Schwachstellen unten betreffen es bekanntermaßen.

KEV-gelistet

öffentlicher Exploit

EPSS ≥ 10%

ungepatcht

nach Schweregrad

2critical5high10medium1low

aktualisiert 2026-10-27

Schwachstellen (33)

Zugehörige CVEs.

Sortierung

ID	Schweregrad	EPSS	ausnutzbar	behoben	veröffentlicht	betroffen
CVE-2025-3125US	high7.2	0.91% (60th)	—	2.0.0.402	2025-11-05	2.0.0 → 2.0.0.402
CVE-2025-5605US	medium5.3	0.85% (58th)	—	2.0.0.403	2025-10-24	2.0.0 → 2.0.0.403
CVE-2025-10611US	—OT erhöht	0.82% (57th)	—	2.0.0.414	2025-10-16	2.0.0 → 2.0.0.414
CVE-2024-6914US	—OT erhöht	0.75% (55th)	—	2.0.0.362	2025-05-22	2.0.0 → 2.0.0.362
CVE-2024-7096US	medium5.4OT erhöht	0.74% (54th)	—	2.0.0.364	2025-05-30	2.0.0 → 2.0.0.364
CVE-2025-15039US	—	0.67% (52nd)	—	2.0.0.425	2026-08-06	2.0.0 → 2.0.0.425
CVE-2024-7097US	—OT erhöht	0.66% (51st)	—	2.0.0.364	2025-05-30	2 Versionen
CVE-2025-5350US	medium4.8	0.62% (49th)	—	2.0.0.401	2025-10-24	2.0.0 → 2.0.0.401
CVE-2025-10907US	high7.2	0.60% (48th)	—	2.0.0.414	2025-11-05	2.0.0 → 2.0.0.414
CVE-2025-9804US	medium6.5	0.56% (46th)	—	2.0.0.409	2025-10-16	2.0.0 → 2.0.0.409
CVE-2025-1862US	high7.2	0.54% (45th)	—	2.0.0.391	2025-09-26	2.0.0 → 2.0.0.391
CVE-2024-8008US	—	0.53% (45th)	—	2.0.0.374	2025-06-02	2.0.0 → 2.0.0.374
CVE-2025-11093US	high7.2	0.47% (41st)	—	2.0.0.414	2025-11-05	2.0.0 → 2.0.0.414
CVE-2025-10713US	critical9.1	0.46% (39th)	—	2.0.0.413	2025-11-05	2.0.0 → 2.0.0.413
CVE-2024-6832US	high7.5	0.41% (35th)	—	2.0.0.366	2026-08-06	2.0.0 → 2.0.0.366
CVE-2024-2374US	critical9.1	0.38% (32nd)	—	2.0.0.348	2026-04-16	2.0.0 → 2.0.0.348
CVE-2024-1248US	medium5.3	0.30% (23rd)	—	2.0.0.333	2026-07-04	2.0.0 → 2.0.0.333
CVE-2024-10302US	medium5.8	0.29% (22nd)	—	2.0.0.400	2026-08-06	2.0.0 → 2.0.0.400
CVE-2025-13736US	—	0.27% (19th)	—	2.0.0.420	2026-08-06	2.0.0 → 2.0.0.420
CVE-2025-8591US	—	0.25% (17th)	—	2.0.0.424	2026-07-06	2.0.0 → 2.0.0.424
CVE-2025-1396US	medium5.3	0.25% (16th)	—	2.0.0.390	2025-09-26	2.0.0 → 2.0.0.390
CVE-2025-9312US	—OT erhöht	0.25% (16th)	—	2.0.0.408	2025-11-18	2.0.0 → 2.0.0.408
CVE-2025-0663US	—	0.24% (15th)	—	2.0.0.387	2025-09-23	2.0.0 → 2.0.0.387
CVE-2024-1440US	medium6.1	0.23% (14th)	—	2.0.0.327	2025-06-02	2 Versionen
CVE-2024-7073US	—	0.22% (13th)	—	2.0.0.363	2025-06-02	2 Versionen
CVE-2025-0672US	low3.8	0.21% (12th)	—	2.0.0.389	2025-09-23	2.0.0 → 2.0.0.389
CVE-2024-3511US	—OT erhöht	0.21% (11th)	—	2.0.0.341	2025-06-23	2 Versionen
CVE-2024-3509US	—	0.20% (10th)	—	2.0.0.345	2025-06-02	2 Versionen
CVE-2025-10853US	medium6.1	0.19% (9th)	—	2.0.0.413	2025-11-05	2.0.0 → 2.0.0.413
CVE-2024-8995US	—	0.19% (8th)	—	2.0.0.389	2026-08-06	2.0.0 → 2.0.0.389
CVE-2024-0391US	medium4.3	0.18% (8th)	—	2.0.0.318	2026-05-11	2.0.0 → 2.0.0.318
CVE-2026-0637US	—	0.16% (5th)	—	2.0.0.426	2026-08-06	2.0.0 → 2.0.0.426
CVE-2025-13394US	—	0.14% (3rd)	—	2.0.0.421	2026-08-06	2.0.0 → 2.0.0.421

Schwächen (8)

Die Schwächeklassen (CWEs), die die meisten dieser CVEs teilen.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-863Incorrect Authorization5 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type3 CVEs
CWE-203Observable Discrepancy2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-611Improper Restriction of XML External Entity Reference2 CVEs
CWE-693Protection Mechanism Failure2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs

Datenquellen (1)

Welche Quellen diesen Datensatz belegen und wann.

EUEU Vulnerability Database (ENISA)33 CVEs

scry

Produkte tragen bekannte Schwachstellen, sobald sie im Internet exponiert sind. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan