VendorsWSO2identity_serverall versions
Vulnerabilities

WSO2 Identity Server

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

83CVEs
CVE-2025-0672
Authentication Bypass in Multiple WSO2 Products via Stale FIDO Credential Association
Published 2025-09-23 · Analyzed
3.8EPSS 0.002
CVE-2025-13736
Username Enumeration via Login Interface in Multiple WSO2 Products Allows User Account Discovery
Published 2026-08-06 · Analyzed
3.7EPSS 0.003
CVE-2025-12627
Improper Refresh Token Implementation via User Impersonation Flow in WSO2 Identity Server Enables Continued Unauthorized Actions
Published 2026-08-06 · Analyzed
2.4EPSS 0.002
← Prev3 / 3