Wso2 Oauth vulnerabilities

1 known vulnerability in Wso2 Oauth from Jenkins. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Jenkins WSO2 Oauth Plugin: Improper Authentication

  CVE-2025-47889May 14, 2025Jenkins

  In Jenkins WSO2 Oauth Plugin 1.0 and earlier, authentication claims are accepted without validation by the "WSO2 Oauth" security realm, allowing unauthenticated attackers to log in to controllers using this security realm using any username and any password, i