Advisories · Technology

WSO2 Carbon Identity User Store Configuration.

Every CVE that names WSO2 Carbon Identity User Store Configuration among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-4412 CVE record

CVSS 2.7 Low

Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations
- WSO2 Enterprise Integrator
- WSO2 API Manager
- Code injection
Not analysed yet 19 Oct 2026