Login Request a demo
WO
Product
WSO2 Open Banking IAM
by WSO2 · last CVE Oct 28, 2026
45
CVEs
0
On KEV
9.8
Max CVSS
10
New 30D
Vulnerabilities45In the news0Timeline
Severity mix
Critical 7High 8Medium 26Low 4
Severity
All severities45Critical7High8Medium26Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WSO2 Open Banking IAM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-9312
9.8
0%
Nov 18
Improper Certificate-Based Authentication Enforcement in Multiple WSO2 Products
Affected: 2.0.0 before 2.0.0.408
CVE-2025-10611
9.8
1%
Oct 16
Potential Broken Access Control in Multiple WSO2 Products via System REST APIs
Affected: 2.0.0 before 2.0.0.414
CVE-2024-6914
9.8
1%
May 22
Incorrect Authorization in Multiple WSO2 Products via Account Recovery SOAP Admin Service Leading to Account Takeover
Affected: 2.0.0 before 2.0.0.362
CVE-2025-15039
9.4
1%
Aug 6
Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products
Affected: 2.0.0 before 2.0.0.425
CVE-2024-4457
9.1
0%
Oct 18
Remote Code Execution via JDBC User Store Configuration in Multiple WSO2 Products Allows Arbitrary Code Execution
Affected: 2.0.0 before 2.0.0.345
CVE-2024-2374
9.1
0%
Apr 16
XML External Entity Injection in Multiple WSO2 Products Allows Arbitrary file read and Denial of Service
Affected: 2.0.0 before 2.0.0.348
CVE-2025-10713
9.1
0%
Nov 5
XML External Entity (XXE) Vulnerability in Multiple WSO2 Products Due to Improper XML Parser Configuration
Affected: 2.0.0 before 2.0.0.413
Showing 7