Every change, newest first
| Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin. | Kind | Record, Which record was edited, by its CVE id, or how many records one collapsed line stands on. | Vendor · product, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry. | What changed | Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong. |
|---|---|---|---|---|---|
| Fri 6 Mar 2026· 1 change | |||||
| 2026-03-06 | CVSS base score changed | CVE-2025-12107 | whole record WSO2 | stated at publication 10.0, now states 8.4CVSS v3.1 · base scoreCriticalHigh | Time to revision 15 days |
| Fri 31 Oct 2025· 1 change | |||||
| 2025-10-31 | CVSS base score changed | CVE-2025-5717 | whole record WSO2 | stated at publication 6.7, now states 6.8CVSS v3.1 · base scoreMediumMedium | Time to revision 38 days |
| Tue 21 Oct 2025· 3 changes | |||||
| 2025-10-21 | Product added | CVE-2024-8008 | not named as affected at publication, now names wso2 api control plane | Time to revision 141 days | |
| 2025-10-21 | Product added | CVE-2024-8008 | not named as affected at publication, now names wso2 traffic manager | Time to revision 141 days | |
| 2025-10-21 | Product added | CVE-2024-8008 | not named as affected at publication, now names wso2 universal gateway | Time to revision 141 days | |
| Thu 16 Oct 2025· 4 changes | |||||
| 2025-10-16 | Product added | CVE-2025-2905 | not named as affected at publication, now names wso2 enterprise integrator | Time to revision 164 days | |
| 2025-10-16 | Product added | CVE-2025-2905 | not named as affected at publication, now names wso2 enterprise service bus | Time to revision 164 days | |
| 2025-10-16 | Product added | CVE-2025-2905 | not named as affected at publication, now names wso2 micro integrator | Time to revision 164 days | |
| 2025-10-16 | Product added | CVE-2025-2905 | not named as affected at publication, now names wso2 open banking am | Time to revision 164 days | |
| Thu 5 Jun 2025· 2 changes | |||||
| 2025-06-05 | Product added | CVE-2023-6837 | not named as affected at publication, now names wso2 carbon identity application authentication framework | Time to revision 538 days | |
| 2025-06-05 | Product added | CVE-2023-6837 | not named as affected at publication, now names wso2 identity server as key manager | Time to revision 538 days | |
Rows, not records: a moved fix version and an added product count once per product, every other kind once per record or advisory.
What this page cannot see
Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.
A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.
The units, the refusals, the cut-offs and every source, in full →
Paste your closed CVE tickets and see which of these changes hit them →