https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-7073.htmlhttps://patchthecve.com/cve/CVE-2024-7073.htmlWed, 17 Jun 2026 08:19:18 +0000MEDIUM 6.5: A server-side request forgery (SSRF) vulnerability exists in multiple WSO2 products due to improper input validation in SOAP admin services. This flaw allows unauthenticated attackers to manipulate server-side requests, enabling access to internal and external resources available through the networkhttps://patchthecve.com/cve/CVE-2024-7097.htmlhttps://patchthecve.com/cve/CVE-2024-7097.htmlWed, 17 Jun 2026 08:19:21 +0000MEDIUM 4.3: An incorrect authorization vulnerability exists in multiple WSO2 products due to a flaw in the SOAP admin service, which allows user account creation regardless of the self-registration configuration settings. This vulnerability enables malicious actors to create new user accounts without proper authttps://patchthecve.com/cve/CVE-2024-7096.htmlhttps://patchthecve.com/cve/CVE-2024-7096.htmlWed, 17 Jun 2026 08:19:21 +0000MEDIUM 4.2: A privilege escalation vulnerability exists in multiple WSO2 products due to a business logic flaw in SOAP admin services. A malicious actor can create a new user with elevated permissions only when all of the following conditions are met: * SOAP admin services are accessible to the attacker. *https://patchthecve.com/cve/CVE-2024-6914.htmlhttps://patchthecve.com/cve/CVE-2024-6914.htmlWed, 17 Jun 2026 08:18:58 +0000CRITICAL 9.8: An incorrect authorization vulnerability exists in multiple WSO2 products due to a business logic flaw in the account recovery-related SOAP admin service. A malicious actor can exploit this vulnerability to reset the password of any user account, leading to a complete account takeover, including acc