This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-2613 | BDVDB-2026-398839 Detail

WSO2WSO2 API Manager

Description#

The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in the structure of SQL statements. A user with administrator privileges can exploit this by influencing the structure of executed SQL statements, enabling blind SQL injection to infer database information and potentially impact the availability of the database service.

Impact#

CAPEC-7: Blind SQL Injection

Weaknesses#

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.