OR
Product
org.wso2.carbon.identity.auth.rest:org.wso2.carbon.identity.auth.valve
by WSO2 · last CVE Oct 16, 2025
1
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch

Add org.wso2.carbon.identity.auth.rest:org.wso2.carbon.identity.auth.valve to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-10611
9.8
1%
Oct 16
Potential Broken Access Control in Multiple WSO2 Products via System REST APIs
Affected: 1.1.1 before 1.1.1.7; 1.1.16 before 1.1.16.6; 1.1.18 before 1.1.18.7; 1.1.20 before 1.1.20.9; 1.1.26 before 1.1.26.11; 1.3.6 before 1.3.6.11; +10 more
Showing 1