CVE-2022-29464 Known ransomware use

WSO2 Multiple Products Unrestrictive Upload of File Vulnerability

WSO2 — Multiple Products

Added to KEV catalog: 25 April 2022
Federal remediation due date: 16 May 2022
Weakness classification (CWE): CWE-22

CISA Description

Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2022-29464

View on NVD View on MITRE CVE View full CISA catalog

More WSO2 Vulnerabilities

CVE-2026-5430

WSO2 Multiple Products Path Traversal Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services