Login Request a demo
IS
Product
Identity Server Analytics
by Wso2 · last CVE Oct 16, 2025
On CISA KEVExploited in the wildRansomware-linked
11
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 1High 3Medium 7Low 0
Severity
All severities11Critical1High3Medium7Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Identity Server Analytics to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-9804
6.5
1%
Oct 16
An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs
Affected: 5.2.0; 5.3.0; 5.5.0; 5.6.0
CVE-2020-24591
6.5
1%
Aug 21
The Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates
Affected: through 5.6.0
CVE-2022-29548
6.1
41%
Apr 21
A reflected XSS issue exists in the Management Console of several WSO2 products
Affected: 5.5.0; 5.6.0
CVE-2020-17453
6.1
26%
Apr 5
WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter
Affected: 5.4.0; 5.4.1; 5.5.0; 5.6.0
CVE-2020-24706
6.1
1%
Aug 27
An issue was discovered in certain WSO2 products
Affected: through 5.6.0
CVE-2020-24704
6.1
1%
Aug 27
An issue was discovered in certain WSO2 products
Affected: 5.5.0
CVE-2023-6911
4.8
0%
Dec 18
Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can be carried out by an attacker injecting a…
Affected: 5.4.0; 5.4.1; 5.5.0; 5.6.0
Showing 7