wso2 Wso2 Carbon Identity Management Vulnerabilities
Wso2 Wso2 Carbon Identity Management vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Information Disclosure via Event Publisher Logging in Multiple WSO2 Products Allows Retrieval of Sensitive Data
CVE-2026-18800Wso2Wso2 Api Manager4.4MEDIUMReflected Cross-Site Scripting via User Search Function in Management Console of Multiple WSO2 Products
CVE-2024-7075Wso2Wso2 Enterprise Integr...4.6MEDIUMAccount Lockout Bypass in WSO2 Product Affecting User Authentication
CVE-2024-5617Wso2Wso2 Api Manager4.8MEDIUMAccess Control Vulnerability in WSO2 API Manager by WSO2
CVE-2025-11969Wso2Wso2 Api Manager9.4CRITICALOAuth2 Token Introspection Flaw in WSO2 Product
CVE-2026-3583Wso2Wso2 Api Manager3.1LOWAccess Control Flaw in WSO2 Affects Network Resource Validation
CVE-2025-14260Wso2Wso2 Api Manager8.3HIGHInsecure Input Validation in WSO2 Product
CVE-2024-6423Wso2Wso2 Api Manager4MEDIUMJavaScript Injection Vulnerability in WSO2 Identity Server
CVE-2024-5139Wso2Wso2 Enterprise Integr...6.1MEDIUMPassword Management Flaw in WSO2's Remote User Store Manager Service
CVE-2024-2323Wso2Wso2 Enterprise Integr...4.8MEDIUMExpression Language Injection Vulnerability in WSO2 Products
CVE-2024-4412Wso2Wso2 Enterprise Integr...2.7LOWSession Management Flaw in WSO2 Identity Server
CVE-2025-13173Wso2Wso2 Api Control Plane6.5MEDIUMAuthorization Flaw in WSO2 User Management System
CVE-2025-10149Wso2Wso2 Identity Server A...8.2HIGHData Exposure in WSO2 Management Console and Product Files
CVE-2025-7203Wso2Wso2 Universal Gateway4.9MEDIUMInput Validation Flaw in WSO2 Management Console Exposes Servers to Code Execution
CVE-2024-4457Wso2Wso2 Enterprise Integr...9.1CRITICALUsername Exposure Vulnerability in WSO2 Product
CVE-2025-5802Wso2Wso2 Api Manager5.3MEDIUMConditional Authentication Bypass in WSO2 Product
CVE-2025-15039Wso2Wso2 Identity Server9.4CRITICALInformation Disclosure Vulnerability in WSO2 Event Publisher
CVE-2026-0637Wso2Wso2 Api Manager4.4MEDIUMCSRF Vulnerability in Carbon Console by WSO2
CVE-2025-13394Wso2Wso2 Identity Server5.4MEDIUMAccess Control Issue in WSO2 Secret Type Management API
CVE-2025-14779Wso2Wso2 Identity Server3.8LOWUser Input Validation Flaw in WSO2 Products
CVE-2024-10302Wso2Wso2 Api Control Plane4MEDIUMAccount Locking Bypass in WSO2 Identity Server
CVE-2024-6832Wso2Wso2 Enterprise Integr...5.9MEDIUMVulnerability in WSO2 Product Affecting Authorization Code Management
CVE-2024-8995Wso2Wso2 Api Manager4.9MEDIUMVulnerability in User Account Validation for WSO2 Products
CVE-2024-0391Wso2Wso2 Identity Server5.3MEDIUMAuthorization Gap in WSO2 Products Allowing Unauthorized File Access
CVE-2024-3511Wso2Wso2 Enterprise Integr...4.3MEDIUMOpen Redirection Vulnerability in WSO2 Products
CVE-2024-1440Wso2Wso2 Identity Server5.4MEDIUM