Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
401,229CVE records
2,593Published, last 7 days
1,734In CISA KEV
1,411Critical, last 30 days
5,599Analysed
10:16 UTCLast NVD sync
Filters Show:
31 results. Wso2 Api Control Plane.
Page 1 of 2| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-12737 | High | 8.4 |  Wso2 Api Control Plane +7 | OS command injection | - | - | 0.22% | Sep 3, 2026 |
| CVE-2026-3416 | High | 7.5 | Wso2 Api Control Plane +1 | CWE-330 | - | - | 0.36% | Sep 3, 2026 |
| CVE-2026-5430 | Critical | 10.0 | Wso2 Api Control Plane +3 | Improper verification of cryptogra | Listed | Confirmed | 0.59% | Aug 6, 2026 |
| CVE-2026-1728 | Critical | 9.8 | Wso2 Api Control Plane +3 | Improper privilege management | - | - | 0.48% | Aug 6, 2026 |
| CVE-2026-0637 | Medium | 4.4 | Wso2 Api Control Plane +7 | Sensitive information in log file | - | - | 0.16% | Aug 6, 2026 |
| CVE-2025-15039 | Critical | 9.4 | Wso2 Api Control Plane +8 | CWE-693 | - | - | 0.67% | Aug 6, 2026 |
| CVE-2025-13394 | Medium | 5.4 | Wso2 Api Control Plane +8 | Cross-site request forgery | - | - | 0.14% | Aug 6, 2026 |
| CVE-2024-8995 | Medium | 4.9 | Wso2 Api Control Plane +7 | Insufficient session expiration | - | - | 0.19% | Aug 6, 2026 |
| CVE-2024-6832 | High | 7.5 | Wso2 Api Control Plane +7 | CWE-693 | - | - | 0.41% | Aug 6, 2026 |
| CVE-2024-10302 | Medium | 5.8 | Wso2 Api Control Plane +6 | Improper input validation | - | - | 0.29% | Aug 6, 2026 |
| CVE-2026-2445 | Medium | 6.1 | Wso2 Api Control Plane +2 | Cross-site scripting | - | - | 0.25% | Jul 20, 2026 |
| CVE-2026-4249 | High | 8.6 | Wso2 Api Control Plane +3 | CWE-707 | - | - | 0.56% | Jul 6, 2026 |
| CVE-2025-8591 | Medium | 6.1 | Wso2 Api Control Plane +7 | Cross-site scripting | - | - | 0.25% | Jul 6, 2026 |
| CVE-2025-8325 | High | 8.8 | Wso2 Api Control Plane +3 | CWE-281 | - | - | 0.17% | May 11, 2026 |
| CVE-2025-8154 | High | 7.5 | Wso2 Api Control Plane +3 | Injection | - | - | 0.19% | May 11, 2026 |
| CVE-2025-13590 | High | 7.2 | Wso2 Api Control Plane +3 | Unrestricted file upload | - | - | 0.70% | Feb 19, 2026 |
| CVE-2025-9312 | Critical | 9.8 | Wso2 Api Control Plane +8 | Missing authentication for critica | - | - | 0.24% | Nov 18, 2025 |
| CVE-2025-6670 | High | 8.8 | Wso2 Api Control Plane +8 | Cross-site request forgery | - | - | 0.23% | Nov 18, 2025 |
| CVE-2025-10853 | Medium | 6.1 | Wso2 Api Control Plane +8 | Cross-site scripting | - | - | 0.18% | Nov 5, 2025 |
| CVE-2025-5770 | Medium | 6.1 | Wso2 Api Control Plane +2 | Cross-site scripting | - | - | 0.20% | Nov 5, 2025 |
