What’s Vulnerable › Vulnerabilities

CVE-2023-6835

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-15 · updated 2026-06-17
• Weakness: CWE-20

Description

Multiple WSO2 products have been identified as vulnerable due to lack of server-side input validation in the Forum feature, API rating could be manipulated.

Affected products

• WSO2 API Manager: 2.2.0, 2.5.0, 2.6.0
• WSO2 Iot Server: 3.3.1

References

• https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2021/WSO2-2021-1357/
• https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2021/WSO2-2021-1357/

Get alerted when CVE-2023-6835 or the next vulnerability affects your stack