Advisories · Technology

WSO2 Carbon Identity Recovery Management.

Every CVE that names WSO2 Carbon Identity Recovery Management among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-4412 CVE record

CVSS 2.7 Low

Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations
- WSO2 Enterprise Integrator
- WSO2 API Manager
- Code injection
Not analysed yet 19 Oct 2026
CVE-2024-10302 CVE record

CVSS 4.0 Medium

Improper Input Validation via Signup Process in Multiple WSO2 Products Enables Content Manipulation and Data Exposure
- WSO2 API Control Plane
- WSO2 Traffic Manager
- CWE-20
Not analysed yet 6 Aug 2026