273 matches found
CVE-2024-6832 Account Lockout Failure via Secondary User Store Inaccessibility in Multiple WSO2 Products Allows Brute Force Attacks
The account locking mechanism fails to trigger when secondary user stores are inaccessible. The software does not maintain a consistent state for account locking if it cannot reach all configured user stores, allowing an attacker to repeatedly attempt authentication with invalid credentials witho...
CVE-2024-8995 Authorization Code issued for Deleted User reuse in Multiple WSO2 Products Allows Unauthorized Access
Unused authorization codes issued to deleted users are not being properly invalidated or removed from the system. This allows for the persistence of these codes, enabling them to be potentially reused. If an attacker possesses both the authorization code and the associated client credentials clie...
PT-2026-55916
The throttling event handling mechanism in multiple WSO2 products accepts user-supplied JSON payloads without sufficient validation of their structure and content. This allows an unauthenticated remote attacker to inject malicious JSON data that can lead to a persistent denial of service conditio...
CVE-2025-11093
An arbitrary code execution vulnerability exists in multiple WSO2 products due to insufficient restrictions in the GraalJS and NashornJS Script Mediator engines. Authenticated users with elevated privileges can execute arbitrary code within the integration runtime environment. By default, access ...
CVE-2025-5770
WSO2: CVE-2025-5770 is a reflected XSS in authentication endpoints across multiple WSO2 products (e.g., Identity Server, API Manager, API Control Plane) caused by insufficient output encoding. The vulnerability allows a malicious actor to inject JavaScript that is reflected in responses, enabling...
EUVD-2008-3995
Malware in sbrugna...
EUVD-2008-3994
Malware in sbrugna...
EUVD-2008-3998
Malware in sbrugna...
EUVD-2008-2576
Malware in sbrugna...
EUVD-2010-0909
Malware in sbrugna...
EUVD-2010-0918
Malware in sbrugna...
EUVD-2010-0920
Malware in sbrugna...
EUVD-2009-3378
Malware in sbrugna...
EUVD-2008-2577
Malware in sbrugna...
EUVD-2008-2575
Malware in sbrugna...
EUVD-2009-1005
Malware in sbrugna...
EUVD-2009-1976
Malware in sbrugna...
EUVD-2009-3385
Malware in sbrugna...