WSO2 org.wso2.carbon.event-processing:org.wso2.carbon.event.simulator.core

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVE	Vulnerable versions	Title	Severity	Published	EPSS	Exploitation
CVE-2025-10907		Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution	HIGH 8.4	2025-11-05	0.6 %