Products: 127
    Vulnerabilities: 165
    Known Exploited: 2
    16
    Critical Level Threats
    23
    High Level Threats
    114
    Medium Level Threats
    11
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2024-6423

    Sensitive Data Exposure via URL Parameters in Multiple WSO2 Products Allows Confidential Information Leakage

    Last Modified: Oct 22, 2026
    Published: Oct 21, 2026

    CVE-2025-0326

    Improper Token Revocation in WSO2 Identity Server Allows Unauthorized Access

    Last Modified: Oct 22, 2026
    Published: Oct 21, 2026

    CVE-2024-7478

    Username Enumeration via External User Stores in Multiple WSO2 Products Allows User Account Discovery

    Last Modified: Oct 22, 2026
    Published: Oct 21, 2026

    CVE-2024-5563

    Incomplete reCaptcha Implementation in Authentication Flows in WSO2 Identity Server Allows Brute Force Attacks

    Last Modified: Oct 22, 2026
    Published: Oct 21, 2026

    CVE-2024-4989

    Open Redirection via Callback URL in WSO2 API Manager Allows Phishing Attacks

    Last Modified: Oct 22, 2026
    Published: Oct 21, 2026
    Items Per Page