Advisories · Technology

WSO2 Token Exchange Grant Type For OAuth.

Every CVE that names WSO2 Token Exchange Grant Type For OAuth among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-11850 CVE record

CVSS 4.3 Medium

Improper Implicit Association via User Store Initialization in WSO2 Identity Server [Identity Confusion / External IDP Use]
- WSO2 Identity Server
- WSO2 Token Exchange Grant Type For OAuth
- Broken access control
Not analysed yet 6 Aug 2026