Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Wso2
Org.wso2.carbon.extension.identity.authenticator.outbound.totp:org.wso2.carbon.extension.identity.authenticator.totp.connector
Wso2 Org.wso2.carbon.extension.identity.authenticator.outbound.totp:org.wso2.carbon.extension.identity.authenticator.totp.connector vulnerabilities
Any severity
Critical
High or worse
Medium or worse
Low or worse
Any EPSS
EPSS 10% or more
EPSS 50% or more
EPSS 90% or more
Known exploited
In KEV
Public exploit
Fix available
Apply
wso2
api manager
,
api manager analytics
,
api control plane
+19 more
+21 more
Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs
CVE-2025-9804
9.6
Critical
October 16, 2025
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open