Login Request a demo
WI
Product
WSO2 Identity Server as Key Manager
by WSO2 · last CVE Oct 28, 2026
40
CVEs
0
On KEV
9.8
Max CVSS
10
New 30D
Vulnerabilities40In the news0Timeline
Severity mix
Critical 6High 9Medium 21Low 4
Severity
All severities40Critical6High9Medium21Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WSO2 Identity Server as Key Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-0672
3.8
0%
Sep 23
Authentication Bypass in Multiple WSO2 Products via Stale FIDO Credential Association
Affected: 5.10.0 before 5.10.0.338
CVE-2025-13736
3.7
0%
Aug 6
Username Enumeration via Login Interface in Multiple WSO2 Products Allows User Account Discovery
Affected: 5.10.0 before 5.10.0.371
CVE-2026-3583
New
3.1–Oct 28
Improper Token Revocation via OAuth2 Scope Enforcement in Multiple WSO2 Products [Disrupted Authentication Flows]
Affected: 5.10.0 before 5.10.0.387
CVE-2024-4412
2.7
0%
Oct 19
Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations
Affected: 5.10.0 before 5.10.0.293
Showing 4