Business Process Server (Wso2) - vulnerabilities (CVEs)

3 CVEs, 1 in the last 30 days, 2 known versions, newest CVE from 2026-10-28. Vendor: Wso2.

CVEs of Business Process Server

• CVE-2026-78674 - CVSS 8.8 (high), 2026-10-28: The BPMN System REST APIs do not sufficiently validate input parameters, allowing authenticated users to submit crafted requests that can lead to the…
• CVE-2017-14995 - CVSS 6.1 (medium), 2017-10-04: The Management Console in WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2 Business Rules Server 2.2.0, WSO2 Complex Event Processor…
• CVE-2017-14651 - CVSS 4.8 (medium), 2017-09-21: WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter.