WO
Product
WSO2 Open Banking IAM
by WSO2 · last CVE Oct 21, 2026
22
CVEs
0
On KEV
9.4
Max CVSS
8
New 30D
Severity mix
Critical 3High 3Medium 14Low 2
Watch

Add WSO2 Open Banking IAM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-12737
8.4
0%
Sep 3
Arbitrary Code Execution via Administrative Operations in Multiple WSO2 Products Allows Remote Code Execution
Affected: 2.0.0 before 2.0.0.418
CVE-2025-10149
8.2
0%
Oct 19
Arbitrary Operations via SCIM Endpoints in Multiple WSO2 Products Enables User Account Takeover
Affected: 2.0.0 before 2.0.0.419
CVE-2024-6832
7.5
0%
Aug 6
Account Lockout Failure via Secondary User Store Inaccessibility in Multiple WSO2 Products Allows Brute Force Attacks
Affected: 2.0.0 before 2.0.0.366
Showing 3