WSO2 WSO2 Enterprise Mobility Manager

• CVE-2025-9804 Critical 9.6 Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs 0.6%
• CVE-2024-7074 Medium 6.8 Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Execution 17.7%
• CVE-2024-7097 Medium 4.3 Incorrect Authorization in Multiple WSO2 Products via SOAP Admin Service Allowing Unauthorized User Signup 0.7%
• CVE-2024-7096 Medium 4.2 Privilege Escalation in Multiple WSO2 Products via SOAP Admin Service Due to Business Logic Flaw 0.7%