WSO2 API Manager cross-site scripting vulnerability

Versions 3.2.0 through 3.2.0.480, 3.2.1 through 3.2.1.99, 4.1.0 through 4.1.0.265, 4.2.0 through 4.2.0.205, 4.3.0 through 4.3.0.117, 4.4.0 through 4.4.0.80, 4.5.0 through 4.5.0.65, 4.6.0 through 4.6.0.29, and 4.7.0 through 4.7.0.1 of WSO2 API Manager; versions 4.5.0 through 4.5.0.66, 4.6.0 throug...

WSO2 API Control Plane session mechanism vulnerability

WSO2 API Control Plane versions prior to 4.5.0 and 4.6.0 and 4.6.0 and 4.6.0.13 contained a session mechanism vulnerability. This vulnerability stemmed from the use of the session binding token feature and token binding verification, but without enabling the “Revoke tokens upon user logout” optio...

WSO2 API Manager Cross-Site Scripting Vulnerability

WSO2 API Manager versions prior to 3.2.0.4, 3.2.1.3 to 3.2.1.53, 4.1.0.214 to 4.1.0.215, 4.2.0.153 to 4.2.0.153, 4.3.0.66 to 4.3.0.66, 4.4.0.29 to 4.4.0.29, and 4.5.0.11 to 4.5.0.11; WSO2 Universal Gateway versions prior to 4.5.0.11; WSO2 Traffic Manager versions prior to 4.5.0.11; WSO2 API Contr...

WSO2 Universal Gateway encryption vulnerabilities

WSO2 Universal Gateway versions from 4.5.0 through 4.5.0.46 and from 4.6.0 through 4.6.0.14, WSO2 Traffic Manager versions from 4.5.0 through 4.5.0.45 and from 4.6.0 through 4.6.0.14, WSO2 API Control Plane versions from 4.5.0 through 4.5.0.47 and from 4.6.0 through 4.6.0.15, WSO2 API Manager...

WSO2 API Manager authorization issue vulnerability

WSO2 API Manager versions prior to 3.2.0.4.34, 3.2.1.54, 4.1.0.218, 4.2.0.156, 4.3.0.67, 4.4.0.30, and 4.5.0.14; WSO2 Universal Gateway versions prior to 4.5.0.14; WSO2 API Control Plane versions prior to 4.5.0.15; and Forgerock Key Manager Component versions prior to 1.0.0.4, 1.1.0.2, and 1.1.5....

WSO2’s various products have security vulnerabilities

WSO2 API Manager, among others, are products of the American company WSO2. The WSO2 API Manager is a suite of API lifecycle management solutions. The WSO2 API Control Plane is a control panel. The WSO2 Traffic Manager is a component designed to regulate and manage API traffic. Several WSO2 produc...