275 matches found
CVE-2024-6832 Account Lockout Failure via Secondary User Store Inaccessibility in Multiple WSO2 Products Allows Brute Force Attacks
The account locking mechanism fails to trigger when secondary user stores are inaccessible. The software does not maintain a consistent state for account locking if it cannot reach all configured user stores, allowing an attacker to repeatedly attempt authentication with invalid credentials witho...
CVE-2024-8995 Authorization Code issued for Deleted User reuse in Multiple WSO2 Products Allows Unauthorized Access
Unused authorization codes issued to deleted users are not being properly invalidated or removed from the system. This allows for the persistence of these codes, enabling them to be potentially reused. If an attacker possesses both the authorization code and the associated client credentials clie...
PT-2026-55916
The throttling event handling mechanism in multiple WSO2 products accepts user-supplied JSON payloads without sufficient validation of their structure and content. This allows an unauthenticated remote attacker to inject malicious JSON data that can lead to a persistent denial of service conditio...
CVE-2025-11093
An arbitrary code execution vulnerability exists in multiple WSO2 products due to insufficient restrictions in the GraalJS and NashornJS Script Mediator engines. Authenticated users with elevated privileges can execute arbitrary code within the integration runtime environment. By default, access ...
CVE-2025-5770
WSO2: CVE-2025-5770 is a reflected XSS in authentication endpoints across multiple WSO2 products (e.g., Identity Server, API Manager, API Control Plane) caused by insufficient output encoding. The vulnerability allows a malicious actor to inject JavaScript that is reflected in responses, enabling...
ABB 800xA Automation System Input Validation DoS
The vulnerability of the integrated ABB 800xA automation system, the Control Builder Safe development environment for secure applications, the Base Software software platform for programmable logic controllers, and the Compact Product Suite, which includes integrated hardware and software product...
EUVD-2010-0915
Malware in sbrugna...
EUVD-2010-0913
Malware in sbrugna...
EUVD-2010-0111
Malware in sbrugna...
EUVD-2009-1976
Malware in sbrugna...
EUVD-2009-3385
Malware in sbrugna...
EUVD-2009-1007
Malware in sbrugna...
EUVD-2010-0901
Malware in sbrugna...
EUVD-2008-3994
Malware in sbrugna...
EUVD-2009-1998
Malware in sbrugna...
EUVD-2009-1969
Malware in sbrugna...
EUVD-2010-0918
Malware in sbrugna...
EUVD-2010-0910
Malware in sbrugna...