wso2 open banking iam

Name: wso2 open banking iam
Brand: wso2

productUS

cpe:2.3:a:wso2:open_banking_iam:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical4high9medium1low

updated 2026-10-27

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-29464US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2022-04-18	= 2.0.0
CVE-2025-3125US	high7.2	0.91% (60th)	—	no fix	2025-11-05	= 2.0.0
CVE-2025-5605US	medium5.3	0.85% (58th)	—	no fix	2025-10-24	= 2.0.0
CVE-2025-10611US	—OT elevated	0.82% (57th)	—	no fix	2025-10-16	= 2.0.0
CVE-2024-6914US	—OT elevated	0.75% (55th)	—	no fix	2025-05-22	= 2.0.0
CVE-2024-7096US	medium5.4OT elevated	0.74% (54th)	—	no fix	2025-05-30	= 2.0.0
CVE-2025-15039US	—	0.67% (52nd)	—	2.0.0.425	2026-08-06	2.0.0 → 2.0.0.425
CVE-2024-7097US	—OT elevated	0.66% (51st)	—	no fix	2025-05-30	= 2.0.0
CVE-2025-5350US	medium4.8	0.62% (49th)	—	no fix	2025-10-24	= 2.0.0
CVE-2025-10907US	high7.2	0.60% (48th)	—	no fix	2025-11-05	= 2.0.0
CVE-2025-9804US	medium6.5	0.56% (46th)	—	no fix	2025-10-16	= 2.0.0
CVE-2025-1862US	high7.2	0.54% (45th)	—	no fix	2025-09-26	= 2.0.0
CVE-2024-8008US	—	0.53% (45th)	—	no fix	2025-06-02	= 2.0.0
CVE-2025-10713US	critical9.1	0.46% (39th)	—	no fix	2025-11-05	= 2.0.0
CVE-2024-6832US	high7.5	0.41% (35th)	—	no fix	2026-08-06	= 2.0.0
CVE-2024-2374US	critical9.1	0.38% (32nd)	—	2.0.0.348	2026-04-16	2.0.0 → 2.0.0.348
CVE-2025-12737US	—	0.37% (31st)	—	2.0.0.418	2026-09-03	2.0.0 → 2.0.0.418
CVE-2024-1248US	medium5.3	0.30% (23rd)	—	2.0.0.333	2026-07-04	2.0.0 → 2.0.0.333
CVE-2024-10302US	medium5.8	0.29% (22nd)	—	no fix	2026-08-06	= 2.0.0
CVE-2025-13736US	—	0.27% (19th)	—	2.0.0.420	2026-08-06	2.0.0 → 2.0.0.420
CVE-2025-8591US	—	0.25% (17th)	—	2.0.0.424	2026-07-06	2.0.0 → 2.0.0.424
CVE-2025-1396US	medium5.3	0.25% (16th)	—	no fix	2025-09-26	= 2.0.0
CVE-2025-9312US	—OT elevated	0.25% (16th)	—	no fix	2025-11-18	= 2.0.0
CVE-2025-6670US	—	0.25% (16th)	—	no fix	2025-11-18	= 2.0.0
CVE-2025-0663US	—	0.24% (15th)	—	no fix	2025-09-23	= 2.0.0
CVE-2024-7073US	—	0.22% (13th)	—	no fix	2025-06-02	= 2.0.0
CVE-2025-0672US	low3.8	0.21% (12th)	—	no fix	2025-09-23	= 2.0.0
CVE-2024-3511US	—OT elevated	0.21% (11th)	—	no fix	2025-06-23	= 2.0.0
CVE-2025-10853US	medium6.1	0.19% (9th)	—	no fix	2025-11-05	= 2.0.0
CVE-2024-8995US	—	0.19% (8th)	—	2.0.0.389	2026-08-06	2.0.0 → 2.0.0.389
CVE-2024-0391US	medium4.3	0.18% (8th)	—	2.0.0.318	2026-05-11	2.0.0 → 2.0.0.318
CVE-2026-0637US	—	0.16% (5th)	—	2.0.0.426	2026-08-06	2.0.0 → 2.0.0.426
CVE-2025-13394US	—	0.14% (3rd)	—	2.0.0.421	2026-08-06	2.0.0 → 2.0.0.421

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-863Incorrect Authorization5 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type4 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-203Observable Discrepancy2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-611Improper Restriction of XML External Entity Reference2 CVEs
CWE-693Protection Mechanism Failure2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan