Advisories · Technology

WSO2 Conditional Authentication User and Roles Related Functions.

Every CVE that names WSO2 Conditional Authentication User and Roles Related Functions among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-9973 CVE record

CVSS 6.4 Medium

Authorization Bypass via Adaptive Authentication in WSO2 Identity Server Allows Cross-Organization Account Takeover
- WSO2 Identity Server
- WSO2 Conditional Authentication User and Roles Related Functions
- Broken access control
Not analysed yet 11 May 2026