Wso2 Api Control Plane vulnerabilities
42 known vulnerabilities affecting wso2/wso2_api_control_plane.
Total CVEs
42
CISA KEV
1
actively exploited
Public exploits
3
Exploited in wild
2
Severity breakdown
CRITICAL9HIGH13MEDIUM20
Vulnerabilities
Page 3 of 3
CVE-2025-4760P4MEDIUMCVSS 4.8≥ 4.5.0, < 4.5.0.82025-09-23
CVE-2025-4760 [MEDIUM] CWE-79 CVE-2025-4760: An authenticated stored cross-site scripting (XSS) vulnerability exists in multiple WSO2 products du
An authenticated stored cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to improper validation of user-supplied input during API document upload in the Publisher portal. A user with publisher privileges can upload a crafted API document containing malicious JavaScript, which is later rendered in the browser when accessed b
nvd
CVE-2026-0637P4MEDIUMCVSS 4.4≥ 4.5.0, < 4.5.0.50≥ 4.6.0, < 4.6.0.142026-08-06
CVE-2026-0637 [MEDIUM] CWE-532 CVE-2026-0637: When an Event Publisher output adapter is configured with irrelevant properties, the affected produc
When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties. This logging occurs without sufficient validation or sanitization of the property values.
A malicious actor with access to the 'wso2carbon' log files could retrieve sensitive information, such as user credentials or other confi
nvd
← Previous3 / 3