WC
Product
WSO2 Carbon User Manager Kernel
3
CVEs
0
On KEV
9.1
Max CVSS
2
New 30D
Severity mix
Critical 1High 1Medium 1Low 0
Watch
Add WSO2 Carbon User Manager Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-4457 | 9.1 | Oct 18 | Remote Code Execution via JDBC User Store Configuration in Multiple WSO2 Products Allows Arbitrary Code Execution Affected: 4.5.0 before 4.5.0.4; 4.5.3 before 4.5.3.34; 4.6.0 before 4.6.0.141; 4.6.1 before 4.6.1.108; 4.6.2 before 4.6.2.610; 4.6.3 before 4.6.3.23; +6 more |
| CVE-2024-6832 | 7.5 | Aug 6 | Account Lockout Failure via Secondary User Store Inaccessibility in Multiple WSO2 Products Allows Brute Force Attacks Affected: 4.5.0 before 4.5.0.7; 4.5.3 before 4.5.3.53; 4.6.0 before 4.6.0.196; 4.6.1 before 4.6.1.163; 4.6.1 before 4.6.1.164; 4.6.3 before 4.6.3.44; +9 more |
| CVE-2024-2323 | 4.8 | Oct 20 | Password Brute Force via Password History Validation in Multiple WSO2 Products Allows User Account Discovery Affected: 4.5.0 before 4.5.0.4; 4.5.3 before 4.5.3.34; 4.6.0 before 4.6.0.137; 4.6.1 before 4.6.1.111; 4.7.1 before 4.7.1.51; 4.9.0 before 4.9.0.54; +1 more |
Showing 3