Lucene search
+L

365 matches found

CNNVD
CNNVD
added 2025/11/05 12:00 a.m.15 views

WSO2多款产品 安全漏洞

WSO2 API Manager and other products are products of WSO2 Corporation, USA.WSO2 API Manager is a set of API lifecycle management solutions.WSO2 Identity Server IS is an identity server.WSO2 Enterprise Integrator is a set of open source hybrid integration platform. A security vulnerability exists i...

9.1CVSS6.4AI score0.00424EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/05 12:00 a.m.17 views

PT-2025-45148

Name of the Vulnerable Software and Affected Versions WSO2 Micro Integrator affected versions not specified WSO2 Enterprise Integrator affected versions not specified WSO2 API Manager affected versions not specified Description An arbitrary code execution issue exists due to insufficient...

8.4CVSS7.3AI score0.00439EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/25 12:00 a.m.13 views

WSO2多款产品 安全漏洞

WSO2 API Manager and other products are products of WSO2 Corporation, USA.WSO2 API Manager is an API lifecycle management solution.WSO2 Identity Server IS is an identity server.WSO2 Enterprise Integrator is an open source hybrid integration platform. A security vulnerability exists in several WSO...

5.3CVSS6.6AI score0.00799EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/25 12:00 a.m.13 views

WSO2 API Manager 安全漏洞

WSO2 API Manager is a suite of API lifecycle management solutions from US-based WSO2. A security vulnerability exists in WSO2 API Manager that stems from the Try-It feature not properly validating user-supplied URLs, which could lead to server-side request forgery and reflective cross-site...

5.9CVSS6.1AI score0.00574EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/10/17 12:45 p.m.17 views

CVE-2025-9152

An improper privilege management vulnerability exists in WSO2 API Manager due to missing authentication and authorization checks in the keymanager-operations Dynamic Client Registration DCR endpoint. A malicious user can exploit this flaw to generate access tokens with elevated privileges,...

9.8CVSS7.1AI score0.00712EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/16 1:15 p.m.13 views

CVE-2025-9152

An improper privilege management vulnerability exists in WSO2 API Manager due to missing authentication and authorization checks in the keymanager-operations Dynamic Client Registration DCR endpoint. A malicious user can exploit this flaw to generate access tokens with elevated privileges,...

9.8CVSS7.1AI score
SaveExploits0References1
NVD
NVD
added 2025/10/16 1:15 p.m.11 views

CVE-2025-9152

An improper privilege management vulnerability exists in WSO2 API Manager due to missing authentication and authorization checks in the keymanager-operations Dynamic Client Registration DCR endpoint. A malicious user can exploit this flaw to generate access tokens with elevated privileges,...

9.8CVSS0.00712EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/16 12:37 p.m.34 views

CVE-2025-9152

CVE-2025-9152 affects WSO2 API Manager (and API Control Plane) via the keymanager-operations Dynamic Client Registration endpoint. The root cause is missing authentication and authorization checks, causing improper privilege management. An attacker could generate access tokens with elevated privi...

9.8CVSS6.7AI score0.00712EPSS
SaveExploits0References1Affected Software2
Positive Technologies
Positive Technologies
added 2025/10/16 12:00 a.m.10 views

PT-2025-42462

Name of the Vulnerable Software and Affected Versions WSO2 API Manager affected versions not specified Description A flaw exists due to missing authentication and authorization checks in the keymanager-operations Dynamic Client Registration DCR endpoint. This can allow a malicious user to generat...

9.8CVSS6.4AI score0.00712EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2025/10/16 12:00 a.m.15 views

WSO2多款产品 安全漏洞

WSO2 API Manager is an API lifecycle management solution, WSO2 API Manager Analytics is an analytics component, and WSO2 API Control Plane is a control panel. A security vulnerability exists in a number of WSO2 products. The vulnerability stems from insufficient enforcement of permissions in the...

9.6CVSS6.5AI score0.00559EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2020-17308

Malware in sbrugna...

6.5CVSS6.5AI score0.01033EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2020-5007

Malware in sbrugna...

8.7CVSS7.8AI score0.01034EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2020-17307

Malware in sbrugna...

9.1CVSS9.1AI score0.0126EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2018-13282

Malware in sbrugna...

5.4CVSS5.5AI score0.00985EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2020-9406

Malware in sbrugna...

6.1CVSS6.3AI score0.00782EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.21 views

EUVD-2019-10990

Malware in sbrugna...

4.8CVSS4.7AI score0.00729EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2019-10983

Malware in sbrugna...

4.8CVSS4.7AI score0.01079EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2020-17418

Malware in sbrugna...

6.1CVSS6.3AI score0.00722EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2019-16072

Malware in sbrugna...

5.5CVSS5.5AI score0.01344EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2020-20378

Malware in sbrugna...

6.1CVSS6.3AI score0.01094EPSS
SaveExploits1References3
Rows per page
Query Builder