Vendor
wso2
Public exploit1Avg CVSS6.2
CVEs in the catalog
95
since 2022-12
Months in the top 100
7
months with a stored rank
Best rank
#47
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| wso2 api manager | 69 | 73% |
| wso2 identity server | 61 | 64% |
| wso2 api control plane | 38 | 40% |
| wso2 identity server as key manager | 38 | 40% |
| wso2 open banking iam | 36 | 38% |
| wso2 open banking am | 32 | 34% |
| wso2 traffic manager | 32 | 34% |
| wso2 universal gateway | 31 | 33% |
| wso2 enterprise integrator | 23 | 24% |
| wso2 open banking km | 8 | 8% |
| wso2 micro integrator | 7 | 7% |
| wso2 carbon api management implementation | 5 | 5% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-79 | 21 | 22% |
| CWE-863 | 10 | 11% |
| CWE-434 | 6 | 6% |
| CWE-20 | 5 | 5% |
| CWE-611 | 5 | 5% |
| CWE-203 | 4 | 4% |
| CWE-613 | 4 | 4% |
| CWE-284 | 3 | 3% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2025-13166 | CWE-203 | none yet | 3.7 | 2026-09-15 |
| CVE-2025-5802 | CWE-203 | none yet | 5.3 | 2026-09-15 |
| CVE-2026-19515 | CWE-78 | none yet | 7 | 2026-09-15 |
| CVE-2026-4103 | CWE-79 | none yet | 6.4 | 2026-09-14 |
| CVE-2026-3096 | CWE-20, CWE-603 | none yet | 4.7 | 2026-09-10 |
| CVE-2025-12737 | CWE-78 | none yet | 8.4 | 2026-09-03 |
| CVE-2026-3416 | CWE-330 | none yet | 5.9 | 2026-09-03 |
| CVE-2026-3418 | CWE-434 | none yet | 9.1 | 2026-08-06 |
| CVE-2026-3415 | CWE-776 | none yet | 8.7 | 2026-08-06 |
| CVE-2025-14561 | CWE-284 | none yet | 9 | 2026-08-06 |
| CVE-2025-12317 | CWE-613 | none yet | 5 | 2026-08-06 |
| CVE-2025-6508 | CWE-79 | none yet | 4.3 | 2026-08-06 |
| CVE-2024-6541 | CWE-20 | none yet | 6.8 | 2026-08-06 |
| CVE-2026-5430 | CWE-347 | 1 | 10 | 2026-08-06 |
| CVE-2026-1728 | CWE-269 | none yet | 9.8 | 2026-08-06 |