{ "schemaVersion": 1, "attribution": [ { "source": "CISA Known Exploited Vulnerabilities", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "licence": "US government work" }, { "source": "GitHub Advisory Database", "url": "https://github.com/advisories", "licence": "CC BY 4.0" }, { "source": "Have I Been Pwned", "url": "https://haveibeenpwned.com/", "licence": "CC BY 4.0" }, { "source": "CVE Program (CVE records)", "url": "https://www.cve.org/Legal/TermsOfUse", "licence": "CVE Terms of Use", "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.", "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy." }, { "source": "FIRST EPSS", "url": "https://www.first.org/epss/", "licence": "free to use; FIRST requests attribution" } ], "incident": { "id": "cve-2024-4457", "url": "https://cveboard.org/i/cve-2024-4457", "urlPt": "https://cveboard.org/pt/i/cve-2024-4457", "json": "https://cveboard.org/i/cve-2024-4457.json", "kind": "vuln", "live": true, "knownExploited": false, "severity": "critical", "title": "WSO2 WSO2 Enterprise Integrator", "summary": "", "titlePt": null, "summaryPt": null, "affected": [ { "vendor": "WSO2", "product": "WSO2 Enterprise Integrator", "defaultStatus": "unaffected", "versions": [ { "version": "0", "status": "unknown", "lessThan": "6.6.0", "lessThanOrEqual": null }, { "version": "6.6.0", "status": "affected", "lessThan": "6.6.0.204", "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "6.6.0.204" ] }, { "vendor": "WSO2", "product": "WSO2 API Manager", "defaultStatus": "unaffected", "versions": [ { "version": "0", "status": "unknown", "lessThan": "3.1.0", "lessThanOrEqual": null }, { "version": "3.1.0", "status": "affected", "lessThan": "3.1.0.275", "lessThanOrEqual": null }, { "version": "3.2.0", "status": "affected", "lessThan": "3.2.0.365", "lessThanOrEqual": null }, { "version": "3.2.1", "status": "affected", "lessThan": "3.2.1.19", "lessThanOrEqual": null }, { "version": "4.0.0", "status": "affected", "lessThan": "4.0.0.308", "lessThanOrEqual": null }, { "version": "4.1.0", "status": "affected", "lessThan": "4.1.0.170", "lessThanOrEqual": null }, { "version": "4.2.0", "status": "affected", "lessThan": "4.2.0.107", "lessThanOrEqual": null }, { "version": "4.3.0", "status": "affected", "lessThan": "4.3.0.21", "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.1.0.275", "3.2.0.365", "3.2.1.19", "4.0.0.308", "4.1.0.170", "4.2.0.107", "4.3.0.21" ] }, { "vendor": "WSO2", "product": "WSO2 Open Banking AM", "defaultStatus": "unaffected", "versions": [ { "version": "0", "status": "unknown", "lessThan": "2.0.0", "lessThanOrEqual": null }, { "version": "2.0.0", "status": "affected", "lessThan": "2.0.0.325", "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "2.0.0.325" ] }, { "vendor": "WSO2", "product": "WSO2 Open Banking IAM", "defaultStatus": "unaffected", "versions": [ { "version": "0", "status": "unknown", "lessThan": "2.0.0", "lessThanOrEqual": null }, { "version": "2.0.0", "status": "affected", "lessThan": "2.0.0.345", "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "2.0.0.345" ] }, { "vendor": "WSO2", "product": "WSO2 Identity Server as Key Manager", "defaultStatus": "unaffected", "versions": [ { "version": "0", "status": "unknown", "lessThan": "5.10.0", "lessThanOrEqual": null }, { "version": "5.10.0", "status": "affected", "lessThan": "5.10.0.292", "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "5.10.0.292" ] }, { "vendor": "WSO2", "product": "WSO2 Identity Server", "defaultStatus": "unaffected", "versions": [ { "version": "0", "status": "unknown", "lessThan": "5.10.0", "lessThanOrEqual": null }, { "version": "5.10.0", "status": "affected", "lessThan": "5.10.0.296", "lessThanOrEqual": null }, { "version": "5.11.0", "status": "affected", "lessThan": "5.11.0.336", "lessThanOrEqual": null }, { "version": "6.0.0", "status": "affected", "lessThan": "6.0.0.188", "lessThanOrEqual": null }, { "version": "6.1.0", "status": "affected", "lessThan": "6.1.0.148", "lessThanOrEqual": null }, { "version": "7.0.0", "status": "affected", "lessThan": "7.0.0.15", "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "5.10.0.296", "5.11.0.336", "6.0.0.188", "6.1.0.148", "7.0.0.15" ] }, { "vendor": "WSO2", "product": "WSO2 Carbon User Manager Kernel", "defaultStatus": "unknown", "versions": [ { "version": "4.5.0", "status": "affected", "lessThan": "4.5.0.4", "lessThanOrEqual": null }, { "version": "4.5.3", "status": "affected", "lessThan": "4.5.3.34", "lessThanOrEqual": null }, { "version": "4.6.0", "status": "affected", "lessThan": "4.6.0.141", "lessThanOrEqual": null }, { "version": "4.6.1", "status": "affected", "lessThan": "4.6.1.108", "lessThanOrEqual": null }, { "version": "4.6.2", "status": "affected", "lessThan": "4.6.2.610", "lessThanOrEqual": null }, { "version": "4.6.3", "status": "affected", "lessThan": "4.6.3.23", "lessThanOrEqual": null }, { "version": "4.6.4", "status": "affected", "lessThan": "4.6.4.5", "lessThanOrEqual": null }, { "version": "4.7.1", "status": "affected", "lessThan": "4.7.1.51", "lessThanOrEqual": null }, { "version": "4.8.1", "status": "affected", "lessThan": "4.8.1.23", "lessThanOrEqual": null }, { "version": "4.9.0", "status": "affected", "lessThan": "4.9.0.54", "lessThanOrEqual": null }, { "version": "4.9.26", "status": "affected", "lessThan": "4.9.26.13", "lessThanOrEqual": null }, { "version": "4.10.9", "status": "affected", "lessThan": "4.10.9.10", "lessThanOrEqual": null }, { "version": "4.9.27", "status": "unaffected", "lessThan": null, "lessThanOrEqual": "*" } ], "omitted": 0, "fixed": [ "4.5.0.4", "4.5.3.34", "4.6.0.141", "4.6.1.108", "4.6.2.610", "4.6.3.23", "4.6.4.5", "4.7.1.51", "4.8.1.23", "4.9.0.54", "4.9.26.13", "4.10.9.10", "4.9.27" ] } ], "omitted": 0, "references": [ { "url": "https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2023-3084/", "tag": "vendor-advisory" }, { "url": "https://github.com/wso2/carbon-kernel/pull/4067", "tag": "patch" } ], "cwes": [ { "id": "CWE-78", "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-10-20T18:41:46.314Z" }, "fix": "listed", "tags": [ "wso2" ], "cves": [ "CVE-2024-4457" ], "ghsa": null, "cvss": { "score": 9.1, "version": "3.1", "by": "CISA-ADP" }, "epss": { "percentage": 0.00387, "percentile": 0.31609, "asOf": "2026-10-24", "by": "FIRST" }, "packages": [], "vendor": "WSO2", "product": "WSO2 Enterprise Integrator", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "cve.now", "url": "https://cve.now/CVE-2024-4457" } ], "cveVersion": 1, "cvePending": false, "publishedAt": "2026-10-18T18:05:34.050Z", "updatedAt": "2026-10-18T18:05:34.050Z" }, "live": true, "events": [ { "id": "cvenow:CVE-2024-4457:cvenow_discovered:first", "incidentId": "cve-2024-4457", "type": "cvenow_discovered", "at": "2026-10-18T18:05:34.050Z", "detail": {} } ] }