Advisories · Technology

WSO2 Forgerock Key Manager Component.

Every CVE that names WSO2 Forgerock Key Manager Component among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-7043 CVE record

CVSS 5.4 Medium

Refresh Token Misuse via Validation Flaw in Multiple WSO2 Products Enables Unauthorized Resource Consumption
- WSO2 API Manager
- WSO2 Universal Gateway
- Broken access control
Not analysed yet 19 Oct 2026