What’s Vulnerable › Products
WSO2 Carbon Identity Application Authentication Framework vulnerabilities
2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your WSO2 Carbon Identity Application Authentication Framework version is affected
Latest WSO2 Carbon Identity Application Authentication Framework vulnerabilities
- CVE-2024-4412 — Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations (CVSS 2.7)
- CVE-2025-5802 — Username Enumeration via Self Registration Flow in Multiple WSO2 Products Allows User Account Discovery (CVSS 5.3)