WSO2 org.wso2.carbon.event-processing:org.wso2.carbon.event.simulator.core

• CVE-2025-10907 High 8.4 Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution 0.6%