Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Wso2
Org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.ui
Wso2 Org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.ui vulnerabilities
Any severity
Critical
High or worse
Medium or worse
Low or worse
Any EPSS
EPSS 10% or more
EPSS 50% or more
EPSS 90% or more
Known exploited
In KEV
Public exploit
Fix available
Apply
wso2
api control plane
,
api manager
,
enterprise integrator
+10 more
+12 more
Reflected Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products Due to Improper Output Encoding
CVE-2025-10853
5.2
Medium
November 5, 2025
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open