Skip to contentWso2 Carbon User Manager Kernel vulnerabilities
- wso2 api manager, carbon identity management, carbon user manager kernel +1 more +3 moreAccount Lock Bypass via User Store Synchronization in Multiple WSO2 Products Allows Brute Force AttacksCVE-2024-56174.8 Medium
- wso2 api manager, carbon user manager kernel, enterprise integrator +4 more +6 morePassword Brute Force via Password History Validation in Multiple WSO2 Products Allows User Account DiscoveryCVE-2024-23234.8 Medium
- wso2 api manager, carbon user manager kernel, enterprise integrator +4 more +6 moreRemote Code Execution via JDBC User Store Configuration in Multiple WSO2 Products Allows Arbitrary Code ExecutionCVE-2024-44579.1 Critical
- wso2 api control plane, api manager, identity server +7 more +9 moreAccount Lockout Failure via Secondary User Store Inaccessibility in Multiple WSO2 Products Allows Brute Force AttacksCVE-2024-68325.9 Medium
- wso2 api manager, enterprise integrator, identity server +4 more +6 moreIncorrect Authorization in Multiple WSO2 Products Allows Unauthorized Access to Registry Versioned FilesCVE-2024-35114.3 Medium