WC
Product
WSO2 Carbon SCIM 2.0 Common Component
by WSO2 · last CVE Oct 19, 2026
1
CVEs
0
On KEV
8.2
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch

Add WSO2 Carbon SCIM 2.0 Common Component to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-10149
8.2
0%
Oct 19
Arbitrary Operations via SCIM Endpoints in Multiple WSO2 Products Enables User Account Takeover
Affected: 1.5.1 before 1.5.1.40; 1.5.46 before 1.5.46.47
Showing 1