WC
Product
WSO2 Carbon SCIM Common Component
by WSO2 · last CVE Oct 19, 2026
1
CVEs
0
On KEV
8.2
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch

Add WSO2 Carbon SCIM Common Component to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-10149
8.2
0%
Oct 19
Arbitrary Operations via SCIM Endpoints in Multiple WSO2 Products Enables User Account Takeover
Affected: 5.6.0 before 5.6.0.1; 5.6.1 before 5.6.1.2; 5.7.0 before 5.7.0.3; 5.7.1 before 5.7.1.1; 5.7.7 before 5.7.7.1; 5.7.8 before 5.7.8.1
Showing 1