CVE-2022-29464 CISA KEV · Actively exploitedLinked to ransomware
WSO2 Multiple Products Unrestrictive Upload of File Vulnerability
CVSS score
—
EPSS probability
%100.0
Risk score
—
Published
4 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: WSO2 Management - Arbitrary File Upload & Remote Code Execution
Makefile Go / Python
Similar Vulnerabilities
9.1
9.1
CVE-2026-3418Arbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code Execution
Patch status unknownEPSS %1
9.4
CVE-2025-15039Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products
Patch status unknownEPSS %1
7.2
CVE-2025-12107Command injection in Wso2 Identity Server
Patch status unknownEPSS %1
8.6
CVE-2026-4249Vulnerability in Wso2 API Control Plane
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-29464"