Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WSO2 API Manager, WSO2 Enterprise Mobility Manager and 4 more products 1.3.0, 1.3.0.114 and 29 more versions Clear all filters
TI-2024-06572 CVE-2024-7097 · GHSA-2vx2-pv2m-vwrq

Incorrect Authorization in Multiple WSO2 Products via SOAP Admin Service Allowing Unauthorized User Signup

Priority LOW 21

An incorrect authorization vulnerability exists in multiple WSO2 products due to a flaw in the SOAP admin service, which allows user account creation regardless of the self-registration configuration settings.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00658 Published 2025-05-30 Fixed in 1.3.0.131, 1.4.0.134 +40 CWE-863