WSO2 WSO2 Open Banking KM

• CVE-2025-15039 Critical 9.4 Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products 0.7%
• CVE-2025-9312 Critical 9.8 Improper Certificate-Based Authentication Enforcement in Multiple WSO2 Products 0.2%
• CVE-2025-9804 Critical 9.6 Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs 0.6%
• CVE-2025-10611 Critical 9.8 Potential Broken Access Control in Multiple WSO2 Products via System REST APIs 0.8%
• CVE-2024-7073 Medium 6.5 Unauthenticated Server-Side Request Forgery (SSRF) in Multiple WSO2 Products via SOAP Admin Services 0.2%
• CVE-2024-7097 Medium 4.3 Incorrect Authorization in Multiple WSO2 Products via SOAP Admin Service Allowing Unauthorized User Signup 0.7%
• CVE-2024-7096 Medium 4.2 Privilege Escalation in Multiple WSO2 Products via SOAP Admin Service Due to Business Logic Flaw 0.7%
• CVE-2024-6914 Critical 9.8 Incorrect Authorization in Multiple WSO2 Products via Account Recovery SOAP Admin Service Leading to Account Takeover 0.8%