Wso2 Carbon Policy Editor Be
Approved changes feed: RSS · Atom
cpe:2.3:a:wso2:wso2_carbon_policy_editor_be:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wso2 (a7ddf9c6-bb76-50d9-a2c9-02e60ad69877) |
|---|---|
| Product | Wso2 Carbon Policy Editor Be (7ff74566-26c5-56e8-8a02-4f2b2d044bce) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-7073 |
vulnerable | 2026-06-08 06:58:21.166495 |
Unauthenticated Server-Side Request Forgery (SSRF) in Multiple WSO2 Products via SOAP Admin Services
MEDIUM (6.5)
A server-side request forgery (SSRF) vulnerability exists in multiple WSO2 products due to improper input validation in SOAP admin services. This flaw allows unauthenticated attackers to manipulate server-side requests, enabling access to internal and external resources available through the network or filesystem.
Exploitation of this vulnerability could lead to unauthorized access to sensitive data and systems, including resources within private networks, as long as they are reachable by the affected product.
Published: 2025-06-02T16:38:33.113Z
Updated: 2025-06-02T17:06:05.767Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.