WSO2 org.wso2.carbon:org.wso2.carbon.base

• CVE-2025-10907 High 8.4 Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution 0.6%
• CVE-2025-9804 Critical 9.6 Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs 0.6%
• CVE-2025-9955 Medium 5.7 Improper Access Control in WSO2 Enterprise Integrator Product via SOAP Admin Services for Logs and User-Store Configuration 0.2%