Advisories · Technology

WSO2 SAML2 SSO Authenticator UI Bundle.

Every CVE that names WSO2 SAML2 SSO Authenticator UI Bundle among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-14260 CVE record

CVSS 8.3 High

Server Side Request Forgery in Multiple WSO2 Products Allows Access to Internal and External Resources
- WSO2 API Manager
- WSO2 Identity Server as Key Manager
- Server-side request forgery (SSRF)
Not analysed yet 28 Oct 2026