216 matches found
CVE-2024-8995 Authorization Code issued for Deleted User reuse in Multiple WSO2 Products Allows Unauthorized Access
Unused authorization codes issued to deleted users are not being properly invalidated or removed from the system. This allows for the persistence of these codes, enabling them to be potentially reused. If an attacker possesses both the authorization code and the associated client credentials clie...
CVE-2025-11093
An arbitrary code execution vulnerability exists in multiple WSO2 products due to insufficient restrictions in the GraalJS and NashornJS Script Mediator engines. Authenticated users with elevated privileges can execute arbitrary code within the integration runtime environment. By default, access ...
CVE-2025-5770
WSO2: CVE-2025-5770 is a reflected XSS in authentication endpoints across multiple WSO2 products (e.g., Identity Server, API Manager, API Control Plane) caused by insufficient output encoding. The vulnerability allows a malicious actor to inject JavaScript that is reflected in responses, enabling...
EUVD-2010-0909
Malware in sbrugna...
EUVD-2008-3995
Malware in sbrugna...
EUVD-2008-2576
Malware in sbrugna...
EUVD-2008-2577
Malware in sbrugna...
EUVD-2008-3994
Malware in sbrugna...
EUVD-2009-1976
Malware in sbrugna...
EUVD-2010-0918
Malware in sbrugna...
EUVD-2010-0920
Malware in sbrugna...
EUVD-2008-3998
Malware in sbrugna...
EUVD-2009-3378
Malware in sbrugna...
EUVD-2009-1005
Malware in sbrugna...
EUVD-2009-3385
Malware in sbrugna...
EUVD-2008-2575
Malware in sbrugna...
EUVD-2008-5439
Malware in sbrugna...
EUVD-2010-0111
Malware in sbrugna...