Skip to contentWso2 Carbon Identity Management vulnerabilities
- wso2 api manager, carbon identity management, carbon user manager kernel +1 more +3 moreAccount Lock Bypass via User Store Synchronization in Multiple WSO2 Products Allows Brute Force AttacksCVE-2024-56174.8 Medium
- wso2 api control plane, api manager, carbon identity application authentication framework +7 more +9 moreUsername Enumeration via Self Registration Flow in Multiple WSO2 Products Allows User Account DiscoveryCVE-2025-58025.3 Medium
- wso2 api control plane, api manager, enterprise integrator +44 more +46 moreCross-Site Request Forgery via Ajax Processor Endpoints in Multiple WSO2 Products Enables Unauthorized ActionsCVE-2025-133945.4 Medium
- wso2 api manager, identity server, identity server as key manager +6 more +8 moreIncorrect Authorization in Multiple WSO2 Products via Account Recovery SOAP Admin Service Leading to Account TakeoverCVE-2024-69149.8 Critical