Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.wso2.am:am-parent

3 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 2 medium
Registry
Maven Central

Advisories 3

  • CVE-2024-7096Medium 4.2

    Privilege Escalation in Multiple WSO2 Products via SOAP Admin Service Due to Business Logic Flaw

    Affected: from 2.0.0, fixed in 4.4.0.

  • CVE-2024-2321Medium 5.6

    Incorrect Authorization in Multiple WSO2 Products Allows API Access via Refresh Token

    Affected: from 4.2.0-beta, through 4.2.0; from 4.1.0-alpha, through 4.1.0; from 4.0.0-beta, through 4.0.0.

  • WSO2 API Manager 3.0.0 does not properly restrict outbound network access from a Publisher node, opening up the possibility of SSRF to…

    Affected: through 3.0.0.