Advisories · Technology

WSO2 Identity Server Keystore Rest API V1.

Every CVE that names WSO2 Identity Server Keystore Rest API V1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-13647 CVE record

CVSS 5.8 Medium

Information Disclosure in Multiple WSO2 Products Allows Exposure of Certificate File Paths
- WSO2 Identity Server
- WSO2 Open Banking IAM
- Information disclosure
Not analysed yet 2 Nov 2026