<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: wso2-carbon-user-manager-kernel</title><description>Every new CVE for wso2-carbon-user-manager-kernel.</description><link>https://agentprime.io/</link><item><title>CVE-2024-5617: Account Lock Bypass via User Store Synchronization in Multiple WSO2 Products Allows Brute Force Attacks</title><link>https://agentprime.io/advisories/CVE-2024-5617/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-5617/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Nov 2026 05:57:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-2323: Password Brute Force via Password History Validation in Multiple WSO2 Products Allows User Account Discovery</title><link>https://agentprime.io/advisories/CVE-2024-2323/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-2323/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 07:46:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-4457: Remote Code Execution via JDBC User Store Configuration in Multiple WSO2 Products Allows Arbitrary Code Execution</title><link>https://agentprime.io/advisories/CVE-2024-4457/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-4457/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 18 Oct 2026 18:05:34 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-6832: Account Lockout Failure via Secondary User Store Inaccessibility in Multiple WSO2 Products Allows Brute Force Attacks</title><link>https://agentprime.io/advisories/CVE-2024-6832/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-6832/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Aug 2026 07:32:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-3511: Incorrect Authorization in Multiple WSO2 Products Allows Unauthorized Access to Registry Versioned Files</title><link>https://agentprime.io/advisories/CVE-2024-3511/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-3511/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 23 Jun 2025 08:47:55 GMT</pubDate><category>CVE</category></item></channel></rss>