CVE-2025-10149

The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and a federated user share the same username, allowing a federated user to perform actions intended for a local user, including...

CVE-2025-10149

Multiple WSO2 products are vulnerable to arbitrary operations via SCIM 1.1 or 2.0 endpoints due to insufficient authorization validation for federated users. When a federated user and a local user share the same username, the federated user can perform actions intended for the local account, pote...

EUVD-2025-211118

The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and a federated user share the same username, allowing a federated user to perform actions intended for a local user, including...

CVE-2025-10149 Arbitrary Operations via SCIM Endpoints in Multiple WSO2 Products Enables User Account Takeover

The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and a federated user share the same username, allowing a federated user to perform actions intended for a local user, including...