CVE-2019-6512

概要

参考情報

• cds.thalesgroup.com/en/tcs-cert/CVE-2019-6512
• wso2.com/security-patch-releases/api-manager · Vendor Advisory
• excellium-services.com/cert-xlm-advisory · Third Party Advisory

api manager のその他の脆弱性

• CVE-2025-12737高 8.4The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a mal…
• CVE-2026-3416高 7.5The API Publisher component previously used a non-cryptographic pseudorandom number generator (PRNG) to create shared secrets for Webhook HM…
• CVE-2026-5430緊急 10.0悪用確認済み（CISA KEV）The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an a…
• CVE-2026-1728緊急 9.8Tokens issued to a low-privileged user are not sufficiently restricted, allowing them to be used to access product-level Admin REST APIs. E…
• CVE-2026-0637中 4.4When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties. This logging oc…