[UPDATE] [kritisch] WSO2 API Manager: Mehrere Schwachstellen

Imported from official source

Announcement

Cybersecurity Classified by Officially

Ein Angreifer kann mehrere Schwachstellen in WSO2 API Manager ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um seine Privilegien zu erhöhen, um beliebigen Programmcode auszuführen, um einen SQL-Injection Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen, um Informationen offenzulegen, und um Daten zu manipulieren.

Source: CERT-Bund (BSI) Warn- und Informationsdienst.

Read the original at the source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2085

Officially imported this from CERT-Bund (BSI) Warn- und Informationsdienst’s own source. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization
CERT-Bund (BSI) Warn- und Informationsdienst — imported from official source
Official source
https://wid.cert-bund.de/content/public/securityAdvisory/rss RSS
Imported
October 20, 2026 11:33
Versions
1 recorded
Identity
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2085

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.