org.wso2.carbon.identity.auth.rest:org.wso2.carbon.identity.auth.service vulnerabilities

1 known vulnerability in org.wso2.carbon.identity.auth.rest:org.wso2.carbon.identity.auth.service from WSO2. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  WSO2 API Manager: Incorrect Authorization

  CVE-2025-10611Oct 16, 2025WSO2

  Due to an insufficient access control implementation in multiple WSO2 Products, authentication and authorization checks for certain REST APIs can be bypassed, allowing them to be invoked without proper validation. Successful exploitation of this vulnerability