https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 02:14:37 +0000 https://cve.radiocsirt.org/vuln/cve-2024-7073 <p><strong>Affected:</strong> WSO2 Identity Server as Key Manager, WSO2 Identity Server, WSO2 Open Banking KM, WSO2 Open Banking IAM, WSO2 Carbon Policy Editor BE</p> <p>A server-side request forgery (SSRF) vulnerability exists in multiple WSO2 products due to improper input validation in SOAP admin services. This flaw allows unauthenticated attackers to manipulate server-side requests, enabling access to internal and external resources available through the network or filesystem.</p> <p>Exploitation of this vulnerability could lead to unauthorized access to sensitive data and systems, including resources within private networks, as long as they are reachable by the affected product.</p> <p><strong>Affected:</strong> WSO2 Identity Server as Key Manager, WSO2 Identity Server, WSO2 Open Banking KM, WSO2 Open Banking IAM, WSO2 Carbon Policy Editor BE</p> <p>A server-side request forgery (SSRF) vulnerability exists in multiple WSO2 products due to improper input validation in SOAP admin services. This flaw allows unauthenticated attackers to manipulate server-side requests, enabling access to internal and external resources available through the network or filesystem.</p> <p>Exploitation of this vulnerability could lead to unauthorized access to sensitive data and systems, including resources within private networks, as long as they are reachable by the affected product.</p> https://cve.radiocsirt.org/vuln/cve-2024-7073