WC
Product
WSO2 Carbon Identity Recovery Management
2
CVEs
0
On KEV
5.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 1Low 1
Watch
Add WSO2 Carbon Identity Recovery Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-10302 | 5.8 | Aug 6 | Improper Input Validation via Signup Process in Multiple WSO2 Products Enables Content Manipulation and Data Exposure Affected: 1.4.1 before 1.4.1.72; 1.4.72 before 1.4.72.68; 1.4.100 before 1.4.100.8; 1.4.102 before 1.4.102.2; 1.7.2 before 1.7.2.4; 1.8.107 before 1.8.107.2; +1 more |
| CVE-2024-4412 | 2.7 | Oct 19 | Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations Affected: 1.4.72 before 1.4.72.66; 1.4.100 before 1.4.100.6; 1.7.2 before 1.7.2.2; 1.8.107 before 1.8.107.1 |
Showing 2