IS
Product
Identity Server AS Key Manager
On CISA KEVExploited in the wildRansomware-linked
52
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 11Medium 32Low 2
Watch
Add Identity Server AS Key Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-0672 | 3.8 | Sep 23 | An authentication bypass vulnerability exists in multiple WSO2 products when FIDO authentication is enabled Affected: 5.10.0 |
| CVE-2025-13736 | 3.7 | Aug 6 | Username Enumeration via Login Interface in Multiple WSO2 Products Allows User Account Discovery Affected: 5.10.0 before 5.10.0.371 |