What’s Vulnerable › Products

WSO2 Business Process Server vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your WSO2 Business Process Server version is affected

Latest WSO2 Business Process Server vulnerabilities

• CVE-2026-78674 — Remote Code Execution via BPMN System REST APIs in Multiple WSO2 Products Permits Arbitrary Command Execution (CVSS 8.8)
• CVE-2017-14995 — (CVSS 6.1)
• CVE-2017-14651 — (CVSS 4.8)