WO
Product
WSO2 Open Banking IAM
45
CVEs
0
On KEV
9.8
Max CVSS
10
New 30D
Severity mix
Critical 7High 8Medium 26Low 4
Watch
Add WSO2 Open Banking IAM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-0672 | 3.8 | Sep 23 | Authentication Bypass in Multiple WSO2 Products via Stale FIDO Credential Association Affected: 2.0.0 before 2.0.0.389 |
| CVE-2025-13736 | 3.7 | Aug 6 | Username Enumeration via Login Interface in Multiple WSO2 Products Allows User Account Discovery Affected: 2.0.0 before 2.0.0.420 |
| CVE-2026-3583 New | 3.1 | Oct 28 | Improper Token Revocation via OAuth2 Scope Enforcement in Multiple WSO2 Products [Disrupted Authentication Flows] Affected: 2.0.0 before 2.0.0.434 |
| CVE-2024-4412 | 2.7 | Oct 19 | Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations Affected: 2.0.0 before 2.0.0.346 |
Showing 4