cveboard RSS feed

CVE-2026-0637

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2026
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Sensitive Information Disclosure via Event Publisher Logging in Multiple WSO2 Products

When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties. This logging occurs without sufficient validation or sanitization of the property values. A malicious actor with access to the 'wso2carbon' log files could retrieve sensitive information, such as user credentials or other confidential data, that was inadvertently logged due to misconfiguration, potentially leading to unauthorized access.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

WSO2 API Manager

Vendor
WSO2
Product
WSO2 API Manager
Platforms
Unknown
Default status
unaffected
WSO2 API Manager · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom3.1.0UnavailableNone listed
3.1.0affectedcustom3.1.0.357UnavailableNone listed
3.2.0affectedcustom3.2.0.465UnavailableNone listed
3.2.1affectedcustom3.2.1.84UnavailableNone listed
4.1.0affectedcustom4.1.0.249UnavailableNone listed
4.2.0affectedcustom4.2.0.189UnavailableNone listed
4.3.0affectedcustom4.3.0.100UnavailableNone listed
4.4.0affectedcustom4.4.0.64UnavailableNone listed
4.5.0affectedcustom4.5.0.49UnavailableNone listed
4.6.0affectedcustom4.6.0.13UnavailableNone listed

WSO2 Traffic Manager

Vendor
WSO2
Product
WSO2 Traffic Manager
Platforms
Unknown
Default status
unaffected
WSO2 Traffic Manager · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom4.5.0UnavailableNone listed
4.5.0affectedcustom4.5.0.48UnavailableNone listed
4.6.0affectedcustom4.6.0.13UnavailableNone listed

WSO2 API Control Plane

Vendor
WSO2
Product
WSO2 API Control Plane
Platforms
Unknown
Default status
unaffected
WSO2 API Control Plane · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom4.5.0UnavailableNone listed
4.5.0affectedcustom4.5.0.50UnavailableNone listed
4.6.0affectedcustom4.6.0.14UnavailableNone listed

WSO2 Universal Gateway

Vendor
WSO2
Product
WSO2 Universal Gateway
Platforms
Unknown
Default status
unaffected
WSO2 Universal Gateway · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom4.5.0UnavailableNone listed
4.5.0affectedcustom4.5.0.49UnavailableNone listed
4.6.0affectedcustom4.6.0.13UnavailableNone listed

WSO2 Identity Server

Vendor
WSO2
Product
WSO2 Identity Server
Platforms
Unknown
Default status
unaffected
WSO2 Identity Server · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom5.10.0UnavailableNone listed
5.10.0affectedcustom5.10.0.386UnavailableNone listed
5.11.0affectedcustom5.11.0.433UnavailableNone listed
6.0.0affectedcustom6.0.0.260UnavailableNone listed
6.1.0affectedcustom6.1.0.261UnavailableNone listed
7.0.0affectedcustom7.0.0.139UnavailableNone listed
7.1.0affectedcustom7.1.0.47UnavailableNone listed
7.2.0affectedcustom7.2.0.8UnavailableNone listed

WSO2 Identity Server as Key Manager

Vendor
WSO2
Product
WSO2 Identity Server as Key Manager
Platforms
Unknown
Default status
unaffected
WSO2 Identity Server as Key Manager · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom5.10.0UnavailableNone listed
5.10.0affectedcustom5.10.0.377UnavailableNone listed

WSO2 Open Banking IAM

Vendor
WSO2
Product
WSO2 Open Banking IAM
Platforms
Unknown
Default status
unaffected
WSO2 Open Banking IAM · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom2.0.0UnavailableNone listed
2.0.0affectedcustom2.0.0.426UnavailableNone listed

WSO2 Open Banking AM

Vendor
WSO2
Product
WSO2 Open Banking AM
Platforms
Unknown
Default status
unaffected
WSO2 Open Banking AM · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom2.0.0UnavailableNone listed
2.0.0affectedcustom2.0.0.406UnavailableNone listed

WSO2 Carbon Event Publisher Core

Vendor
WSO2
Product
WSO2 Carbon Event Publisher Core
Platforms
Unknown
Default status
unknown
Package
org.wso2.carbon.analytics-common:org.wso2.carbon.event.publisher.core
WSO2 Carbon Event Publisher Core · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
5.2.24affectedcustom5.2.24.11UnavailableNone listed
5.2.26affectedcustom5.2.26.24UnavailableNone listed
5.2.27affectedcustom5.2.27.7UnavailableNone listed
5.2.41affectedcustom5.2.41.8UnavailableNone listed
5.2.45affectedcustom5.2.45.2UnavailableNone listed
5.2.50affectedcustom5.2.50.3UnavailableNone listed
5.2.57affectedcustom5.2.57.12UnavailableNone listed
5.2.58affectedcustom5.2.58.3UnavailableNone listed
5.2.61affectedcustom5.2.61.4UnavailableNone listed
5.2.64affectedcustom5.2.64.1UnavailableNone listed
5.3.5affectedcustom5.3.5.10UnavailableNone listed
5.3.11affectedcustom5.3.11.7UnavailableNone listed
5.3.15affectedcustom5.3.15.6UnavailableNone listed
5.3.20affectedcustom5.3.20.3UnavailableNone listed
5.3.27affectedcustom5.3.27.1UnavailableNone listed
xunaffectedcustomUnavailable*None listed