WSO2 Carbon User Manager Kernel vulnerabilities

2 known vulnerabilities in WSO2 Carbon User Manager Kernel from WSO2. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  WSO2 Enterprise Integrator: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-4457Oct 18, 2026WSO2

  The Management Console fails to properly validate input related to the configuration of JDBC user stores. This weakness allows an attacker to supply specially crafted input that can lead to the execution of arbitrary code on the affected server. Successful exp

• 7.5 High severity

  WSO2 Enterprise Integrator: Protection Mechanism Failure

  CVE-2024-6832Aug 6, 2026WSO2

  The account locking mechanism fails to trigger when secondary user stores are inaccessible. The software does not maintain a consistent state for account locking if it cannot reach all configured user stores, allowing an attacker to repeatedly attempt authenti