<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: wso2-carbon-identity-application-authentication-framework</title><description>Every new CVE for wso2-carbon-identity-application-authentication-framework.</description><link>https://agentprime.io/</link><item><title>CVE-2024-4412: Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations</title><link>https://agentprime.io/advisories/CVE-2024-4412/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-4412/</guid><description>CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 19 Oct 2026 16:59:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-5802: Username Enumeration via Self Registration Flow in Multiple WSO2 Products Allows User Account Discovery</title><link>https://agentprime.io/advisories/CVE-2025-5802/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-5802/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Sep 2026 09:53:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-15039: Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products</title><link>https://agentprime.io/advisories/CVE-2025-15039/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-15039/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Aug 2026 07:33:23 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-13909: Information Disclosure via Multi-Tenant Authentication Flows in WSO2 Identity Server Allows Cross-Tenant PII Exposure</title><link>https://agentprime.io/advisories/CVE-2025-13909/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-13909/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Aug 2026 07:33:14 GMT</pubDate><category>CVE</category></item></channel></rss>