Known Vulnerabilities for WSO2 API Manager by WSO2
Listed below are 3 of the newest known vulnerabilities associated with "WSO2 API Manager" by "WSO2".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-4052 json | This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing.... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2025-11969 json | The System REST APIs do not correctly enforce access control mechanisms, allowing users with lower privilege roles to execute... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2024-4989 json | The callback URL parameter in WSO2 API Manager fails to validate user-supplied input, allowing it to be controlled by malicio... | Not Provided | 2026-10-21 | 2026-10-30 |