Sploitus

14 exploited vulnerabilities in Wso2 Api Manager

Vulnerabilities with publicly known exploits

Vendors
Wso2
With known exploits
14
Affected wso2 Api Manager versions
≤ 4.0.0, 3.1.0, 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.2.0
Affected wso2 Enterprise Integrator versions
≤ 6.6.0, 6.2.0, 6.3.0, 6.4.0, 6.5.0
Affected wso2 Identity Server versions
≤ 5.11.0, 5.5.0, 5.6.0, 5.7.0, 5.9.0, 5.10.0, 5.8.0
Affected wso2 Identity Server Analytics versions
= 5.4.0, 5.4.1, 5.5.0, 5.6.0
Affected wso2 Identity Server As Key Manager versions
≤ 5.10.0, 5.5.0, 5.6.0, 5.7.0, 5.9.0
Affected wso2 Open Banking Am versions
≤ 2.0.0
Affected wso2 Open Banking Iam versions
= 2.0.0
Affected wso2 Open Banking Km versions
≤ 1.5.0

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2022-29464 21 exploits
CVSS 10.0 CRITICAL 2022-04-01FIX AVAILABLE
Exploit for Path Traversal in Wso2 Api_ManagerExploit for Path Traversal in Wso2 Api_Manager
CVE-2023-31664
CVSS 6.1 MEDIUM 2023-05-20FIX AVAILABLE
CVE-2020-27885
CVSS 6.1 MEDIUM 2020-10-29
CVE-2019-20437
CVSS 6.1 MEDIUM 2020-01-27FIX AVAILABLE
CVE-2019-20436
CVSS 6.1 MEDIUM 2020-01-27
CVE-2022-29548 4 exploits
CVSS 5.8 MEDIUM 2022-04-01FIX AVAILABLE
WSO2 Management Console (Multiple Products) - Unauthenticated Reflected XSS ExploitWSO2 Management Console (Multiple Products) - Unauthenticated Reflected Cross-Site Scripting (XSS)
CVE-2019-20443
CVSS 4.8 MEDIUM 2020-01-27FIX AVAILABLE
CVE-2019-20442
CVSS 4.8 MEDIUM 2020-01-27FIX AVAILABLE
CVE-2019-20441
CVSS 4.8 MEDIUM 2020-01-27FIX AVAILABLE
CVE-2019-20440
CVSS 4.8 MEDIUM 2020-01-27FIX AVAILABLE
CVE-2019-20439
CVSS 4.8 MEDIUM 2020-01-27FIX AVAILABLE
CVE-2019-20438
CVSS 4.8 MEDIUM 2020-01-27FIX AVAILABLE
CVE-2019-20435
CVSS 4.8 MEDIUM 2020-01-27FIX AVAILABLE
CVE-2019-20434
CVSS 4.8 MEDIUM 2020-01-27FIX AVAILABLE