Advisories · Technology
WSO2 Carbon Identity User Store Configuration UI.
Every CVE that names WSO2 Carbon Identity User Store Configuration UI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.7 Low
Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations
- WSO2 Enterprise Integrator
- WSO2 API Manager
- Code injection
- CVSS 5.4 Medium
Cross-Site Request Forgery via Ajax Processor Endpoints in Multiple WSO2 Products Enables Unauthorized Actions
- WSO2 Identity Server
- WSO2 API Manager
- Cross-site request forgery (CSRF)