Advisories · Technology
WSO2 Carbon Identity Management.
Every CVE that names WSO2 Carbon Identity Management among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.8 Medium
Account Lock Bypass via User Store Synchronization in Multiple WSO2 Products Allows Brute Force Attacks
- WSO2 API Manager
- WSO2 Identity Server
- CWE-799
- CVSS 9.8 CriticalCritical · CVSS 9+
Incorrect Authorization in Multiple WSO2 Products via Account Recovery SOAP Admin Service Leading to Account Takeover
- WSO2 API Manager
- WSO2 Governance Registry
- Broken access control