What’s Vulnerable › Products
WSO2 Carbon User Manager Kernel vulnerabilities
2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your WSO2 Carbon User Manager Kernel version is affected
Latest WSO2 Carbon User Manager Kernel vulnerabilities
- CVE-2024-2323 — Password Brute Force via Password History Validation in Multiple WSO2 Products Allows User Account Discovery (CVSS 4.8)
- CVE-2024-4457 — Remote Code Execution via JDBC User Store Configuration in Multiple WSO2 Products Allows Arbitrary Code Execution (CVSS 9.1)