WSO2 Carbon Identity Management vulnerabilities

1 known vulnerability in WSO2 Carbon Identity Management from WSO2. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  WSO2 API Manager: Incorrect Authorization

  CVE-2024-6914May 22, 2025WSO2

  An incorrect authorization vulnerability exists in multiple WSO2 products due to a business logic flaw in the account recovery-related SOAP admin service. A malicious actor can exploit this vulnerability to reset the password of any user account, leading to a