Advisories · Technology
WSO2 Email OTP Authenticator.
Every CVE that names WSO2 Email OTP Authenticator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Username Enumeration via Authentication Endpoint in WSO2 Identity Server Allows User Account Discovery
- WSO2 Identity Server
- WSO2 Carbon Abstract OTP Authenticator
- Information disclosure
- CVSS 4.3 Medium
Information Disclosure via Multi-Tenant Authentication Flows in WSO2 Identity Server Allows Cross-Tenant PII Exposure
- WSO2 Identity Server
- WSO2 Carbon Identity Application Authentication Framework
- Information disclosure
- CWE-20
- CVSS 5.3 Medium
Username Enumeration via Email OTP Flow in Multiple WSO2 Products Allows User Account Discovery
- WSO2 Identity Server
- WSO2 Open Banking IAM
- CWE-204