agentprime: wso2-carbon-oauthEvery new CVE for wso2-carbon-oauth.https://agentprime.io/CVE-2025-1397: Improper IDP Status Validation via JWT Bearer or SAML2 Bearer Grants in Multiple WSO2 Products Allows Access Token Issuance for Disabled Identity Providershttps://agentprime.io/advisories/CVE-2025-1397/https://agentprime.io/advisories/CVE-2025-1397/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 06:07:57 GMTCVECVE-2024-9517: Improper Token Renewal in Refresh Token Grant in Multiple WSO2 Products Allows Unauthorized Access to Blocked Accountshttps://agentprime.io/advisories/CVE-2024-9517/https://agentprime.io/advisories/CVE-2024-9517/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 11:30:15 GMTCVECVE-2026-6647: Incomplete OAuth Token Revocation via Case Mismatch in WSO2 Identity Server Allows Continued Access After Lifecycle Eventshttps://agentprime.io/advisories/CVE-2026-6647/https://agentprime.io/advisories/CVE-2026-6647/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 19:21:35 GMTCVECVE-2026-3583: Improper Token Revocation via OAuth2 Scope Enforcement in Multiple WSO2 Products [Disrupted Authentication Flows]https://agentprime.io/advisories/CVE-2026-3583/https://agentprime.io/advisories/CVE-2026-3583/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 19:21:34 GMTCVECVE-2025-0326: Improper Token Revocation in WSO2 Identity Server Allows Unauthorized Accesshttps://agentprime.io/advisories/CVE-2025-0326/https://agentprime.io/advisories/CVE-2025-0326/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 13:50:42 GMTCVECVE-2025-13173: Improper Token Revocation via Session-Bound Token Flow in Multiple WSO2 Products Allows Unauthorized Access After Session Terminationhttps://agentprime.io/advisories/CVE-2025-13173/https://agentprime.io/advisories/CVE-2025-13173/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 16:49:08 GMTCVECVE-2025-12627: Improper Refresh Token Implementation via User Impersonation Flow in WSO2 Identity Server Enables Continued Unauthorized Actionshttps://agentprime.io/advisories/CVE-2025-12627/https://agentprime.io/advisories/CVE-2025-12627/CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 07:33:12 GMTCVECVE-2024-8995: Authorization Code issued for Deleted User reuse in Multiple WSO2 Products Allows Unauthorized Accesshttps://agentprime.io/advisories/CVE-2024-8995/https://agentprime.io/advisories/CVE-2024-8995/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 07:32:56 GMTCVE