WC
Product
WSO2 Carbon Identity User Store Configuration UI
3
CVEs
0
On KEV
5.4
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 2Low 1
Watch
Add WSO2 Carbon Identity User Store Configuration UI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-13394 | 5.4 | Aug 6 | Cross-Site Request Forgery via Ajax Processor Endpoints in Multiple WSO2 Products Enables Unauthorized Actions Affected: 5.14.127 before 5.14.127.13; 5.17.5 before 5.17.5.330; 5.17.5 before 5.17.5.331; 5.17.118 before 5.17.118.22; 5.18.187 before 5.18.187.328; 5.18.187 before 5.18.187.329; +11 more |
| CVE-2024-8008 | 5.2 | Jun 2 | Reflected Cross-Site Scripting (XSS) in Multiple WSO2 Products via JDBC User Store Connection Validation Affected: 5.14.127 before 5.14.127.9; 5.17.5 before 5.17.5.289; 5.17.118 before 5.17.118.10; 5.18.187 before 5.18.187.276; 5.18.248 before 5.18.248.22; 5.23.8 before 5.23.8.193; +6 more |
| CVE-2024-4412 | 2.7 | Oct 19 | Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations Affected: 5.14.127 before 5.14.127.8; 5.17.5 before 5.17.5.266; 5.17.118 before 5.17.118.6; 5.18.187 before 5.18.187.253; 5.18.248 before 5.18.248.20; 5.23.8 before 5.23.8.178; +4 more |
Showing 3