WSO2 Carbon-Registry vulnerabilities

2 CVEs affecting WSO2 Carbon-Registry, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-4521, published 2022-12-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-4520, published 2022-12-15. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability was found in WSO2 carbon-registry up to 4.8.11. It has been rated as problematic. Affected by this issue is some unknown functionality of the file…
CVE-2022-4521, published 2022-12-15. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability classified as problematic has been found in WSO2 carbon-registry up to 4.8.6. This affects an unknown part of the component Request Parameter Handler. The manipulation of the argument…