crnković
8 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
24İzleyin | CVE-2025-5770İstismar yok | Reflected Cross-Site Scripting (XSS) in Authentication Endpoints of Multiple WSO2 Productswso2 · api control plane · CWE-79 | Orta6,1 | — | %0,2 | 5 Kas 2025 |
24İzleyin | CVE-2025-10853İstismar yok | Reflected Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products Due to Improper Output Encodingwso2 · api control plane · CWE-79 | Orta6,1 | — | %0,1 | 5 Kas 2025 |
28İzleyin | CVE-2025-11093İstismar yok | Arbitrary Code Execution with higher privileged users in Multiple WSO2 Products via Script Mediator Engines (GraalJS and NashornJS)wso2 · api control plane · CWE-94 | Yüksek7,2 | — | %0,4 | 5 Kas 2025 |
28İzleyin | CVE-2025-10907İstismar yok | Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Executionwso2 · api control plane · CWE-434 | Yüksek7,2 | — | %0,5 | 5 Kas 2025 |
36İzleyin | CVE-2025-10713İstismar yok | XML External Entity (XXE) Vulnerability in Multiple WSO2 Products Due to Improper XML Parser Configurationwso2 · api control plane · CWE-611 | Kritik9,1 | — | %0,4 | 5 Kas 2025 |
39İzleyin | CVE-2025-9152İstismar yok | Improper Privilege Management in Multiple WSO2 API Manager via keymanager-operations DCR Endpointwso2 · api control plane · CWE-306 | Kritik9,8 | — | %0,7 | 16 Eki 2025 |
26İzleyin | CVE-2025-9804İstismar yok | Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIswso2 · api control plane · CWE-284 | Orta6,5 | — | %0,5 | 16 Eki 2025 |
36İzleyin | CVE-2025-2905İstismar yok | An XML External Entity (XXE) vulnerability in Multiple WSO2 Productswso2 · api manager · CWE-611 | Kritik9,1 | — | %1,3 | 5 May 2025 |
- CVE-2025-577024İzleyin
Reflected Cross-Site Scripting (XSS) in Authentication Endpoints of Multiple WSO2 Products
OrtaCVSS 6,1İstismar yokEPSS %0wso2 · api control plane5 Kas 2025
- CVE-2025-1085324İzleyin
Reflected Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products Due to Improper Output Encoding
OrtaCVSS 6,1İstismar yokEPSS %0wso2 · api control plane5 Kas 2025
- CVE-2025-1109328İzleyin
Arbitrary Code Execution with higher privileged users in Multiple WSO2 Products via Script Mediator Engines (GraalJS and NashornJS)
YüksekCVSS 7,2İstismar yokEPSS %0wso2 · api control plane5 Kas 2025
- CVE-2025-1090728İzleyin
Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution
YüksekCVSS 7,2İstismar yokEPSS %0wso2 · api control plane5 Kas 2025
- CVE-2025-1071336İzleyin
XML External Entity (XXE) Vulnerability in Multiple WSO2 Products Due to Improper XML Parser Configuration
KritikCVSS 9,1İstismar yokEPSS %0wso2 · api control plane5 Kas 2025
- CVE-2025-915239İzleyin
Improper Privilege Management in Multiple WSO2 API Manager via keymanager-operations DCR Endpoint
KritikCVSS 9,8İstismar yokEPSS %0wso2 · api control plane16 Eki 2025
- CVE-2025-980426İzleyin
Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs
OrtaCVSS 6,5İstismar yokEPSS %0wso2 · api control plane16 Eki 2025
- CVE-2025-290536İzleyin
An XML External Entity (XXE) vulnerability in Multiple WSO2 Products
KritikCVSS 9,1İstismar yokEPSS %1wso2 · api manager5 May 2025