Approved changes feed: RSS · Atom

cpe:2.3:a:wso2:wso2_identity_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWso2 (a7ddf9c6-bb76-50d9-a2c9-02e60ad69877)
ProductWso2 Identity Server (b3c6eec8-9237-5da6-b152-5ad78df089f7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-2323 vulnerable 2026-11-03 10:46:09.390162 Password Brute Force via Password History Validation in Multiple WSO2 Products Allows User Account Discovery
MEDIUM (4.8)
The RemoteUserStoreManagerService does not sufficiently validate password change attempts when the password history validation feature is enabled. This oversight allows an attacker to repeatedly attempt password guesses for a user account without being adequately restricted. Exploiting this vulnerability enables an attacker to discover a user's password through brute force, leading to account impersonation. The success rate of such an attack is influenced by the complexity of the targeted user's password, with simpler passwords increasing the likelihood of compromise.
Published: 2026-10-20T07:46:37.171Z
Updated: 2026-10-20T19:17:46.609Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2323 under_investigation 2026-11-03 10:46:09.376718 Password Brute Force via Password History Validation in Multiple WSO2 Products Allows User Account Discovery
MEDIUM (4.8)
The RemoteUserStoreManagerService does not sufficiently validate password change attempts when the password history validation feature is enabled. This oversight allows an attacker to repeatedly attempt password guesses for a user account without being adequately restricted. Exploiting this vulnerability enables an attacker to discover a user's password through brute force, leading to account impersonation. The success rate of such an attack is influenced by the complexity of the targeted user's password, with simpler passwords increasing the likelihood of compromise.
Published: 2026-10-20T07:46:37.171Z
Updated: 2026-10-20T19:17:46.609Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5563 under_investigation 2026-11-03 10:44:50.895830 Incomplete reCaptcha Implementation in Authentication Flows in WSO2 Identity Server Allows Brute Force Attacks
MEDIUM (4.8)
Due to an incomplete implementation, reCaptcha is not applied to certain authentication flows even when the reCaptcha option is enabled. This oversight permits attackers to bypass the intended protection mechanism. Brute force attacks, if successful, can lead to unauthorized access to user accounts and sensitive information by systematically attempting various credential combinations.
Published: 2026-10-21T13:44:40.480Z
Updated: 2026-10-30T17:11:39.685Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5139 vulnerable 2026-11-03 10:44:50.678345 Cross-Site Scripting via Authentication Endpoint in Multiple WSO2 Products Enables UI Manipulation and Redirection
MEDIUM (6.1)
The Authentication Endpoint accepts user-supplied input without sufficient encoding, allowing for the injection of malicious JavaScript payloads. This vulnerability can be triggered by submitting crafted input to the Authentication Endpoint. Successful exploitation allows an attacker to redirect the user's browser to a malicious website, modify the web page's user interface, or extract sensitive information from the browser. However, due to the `httpOnly` flag on session-related cookies, session hijacking is not possible.
Published: 2026-10-21T13:36:49.246Z
Updated: 2026-10-30T17:06:32.391Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5139 under_investigation 2026-11-03 10:44:50.645812 Cross-Site Scripting via Authentication Endpoint in Multiple WSO2 Products Enables UI Manipulation and Redirection
MEDIUM (6.1)
The Authentication Endpoint accepts user-supplied input without sufficient encoding, allowing for the injection of malicious JavaScript payloads. This vulnerability can be triggered by submitting crafted input to the Authentication Endpoint. Successful exploitation allows an attacker to redirect the user's browser to a malicious website, modify the web page's user interface, or extract sensitive information from the browser. However, due to the `httpOnly` flag on session-related cookies, session hijacking is not possible.
Published: 2026-10-21T13:36:49.246Z
Updated: 2026-10-30T17:06:32.391Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4457 vulnerable 2026-11-03 10:44:38.816317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4457 under_investigation 2026-11-03 10:44:38.807632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4412 vulnerable 2026-11-03 10:44:35.520216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4412 under_investigation 2026-11-03 10:44:35.458772 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6423 vulnerable 2026-11-03 10:44:26.303136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6423 under_investigation 2026-11-03 10:44:26.259900 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7478 vulnerable 2026-11-03 10:44:04.248935 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7478 under_investigation 2026-11-03 10:44:04.221552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6647 vulnerable 2026-11-03 10:17:48.285428 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3583 vulnerable 2026-11-03 10:16:39.238770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3583 under_investigation 2026-11-03 10:16:39.232185 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11854 under_investigation 2026-11-03 10:15:32.554750 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13591 vulnerable 2026-11-03 10:07:08.971633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13591 under_investigation 2026-11-03 10:07:08.965789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13173 vulnerable 2026-11-03 10:07:06.864385 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13173 under_investigation 2026-11-03 10:07:06.850407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10149 vulnerable 2026-11-03 10:06:45.462399 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10149 under_investigation 2026-11-03 10:06:45.454626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14260 vulnerable 2026-11-03 10:06:33.514733 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14260 under_investigation 2026-11-03 10:06:33.506941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0326 under_investigation 2026-11-03 10:05:20.012199 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7203 vulnerable 2026-11-03 10:03:06.689959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7203 under_investigation 2026-11-03 10:03:06.664696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6832 under_investigation 2026-09-16 04:46:31.725505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10302 under_investigation 2026-09-16 04:46:25.194348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8995 vulnerable 2026-09-16 04:45:11.172403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8995 under_investigation 2026-09-16 04:45:11.168241 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0637 under_investigation 2026-09-16 04:33:33.138419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12627 vulnerable 2026-09-16 04:27:44.944995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12317 vulnerable 2026-09-16 04:27:43.872600 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13394 under_investigation 2026-09-16 04:27:39.916779 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13736 under_investigation 2026-09-16 04:27:39.604960 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13909 vulnerable 2026-09-16 04:27:39.460379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13166 under_investigation 2026-09-16 04:27:39.097226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11850 vulnerable 2026-09-16 04:27:36.452159 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14779 vulnerable 2026-09-16 04:27:19.656186 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15039 vulnerable 2026-09-16 04:27:17.936868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15039 under_investigation 2026-09-16 04:27:17.928853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5802 under_investigation 2026-09-16 04:26:08.626047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2445 vulnerable 2026-07-29 00:37:44.812701 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8591 vulnerable 2026-07-29 00:18:11.403295 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8591 under_investigation 2026-07-29 00:18:11.398360 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13475 under_investigation 2026-07-28 23:21:21.163133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1248 under_investigation 2026-07-28 22:22:45.012801 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9973 vulnerable 2026-06-08 07:47:10.387307 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9804 under_investigation 2026-06-08 07:47:09.868140 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9312 vulnerable 2026-06-08 07:45:22.253559 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9312 under_investigation 2026-06-08 07:45:22.250634 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6670 vulnerable 2026-06-08 07:43:15.819056 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6670 under_investigation 2026-06-08 07:43:15.813026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6024 under_investigation 2026-06-08 07:43:14.133111 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5770 vulnerable 2026-06-08 07:37:25.678521 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5770 under_investigation 2026-06-08 07:37:25.678125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5605 vulnerable 2026-06-08 07:37:25.268893 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5605 under_investigation 2026-06-08 07:37:25.259345 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5350 under_investigation 2026-06-08 07:35:24.725692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3125 vulnerable 2026-06-08 07:23:08.199842 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3125 under_investigation 2026-06-08 07:23:08.192523 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1862 under_investigation 2026-06-08 07:08:38.362796 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1396 under_investigation 2026-06-08 07:08:36.723990 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12624 vulnerable 2026-06-08 07:04:30.557333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12624 under_investigation 2026-06-08 07:04:30.557269 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12107 vulnerable 2026-06-08 07:04:29.700288 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10908 vulnerable 2026-06-08 07:02:27.785968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10908 under_investigation 2026-06-08 07:02:27.785668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10907 vulnerable 2026-06-08 07:02:27.769849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10907 under_investigation 2026-06-08 07:02:27.761939 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10853 vulnerable 2026-06-08 07:02:27.617305 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10853 under_investigation 2026-06-08 07:02:27.607461 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10713 vulnerable 2026-06-08 07:02:27.390643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10713 under_investigation 2026-06-08 07:02:27.387661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10611 under_investigation 2026-06-08 07:02:27.156098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10503 vulnerable 2026-06-08 07:02:26.991587 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10470 vulnerable 2026-06-08 07:02:26.920857 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0672 under_investigation 2026-06-08 07:02:25.144135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0663 under_investigation 2026-06-08 07:02:25.102964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0209 vulnerable 2026-06-08 07:02:23.918602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8008 under_investigation 2026-06-08 06:58:24.105804 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7487 vulnerable 2026-06-08 06:58:22.280523 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7103 vulnerable 2026-06-08 06:58:21.265811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7097 under_investigation 2026-06-08 06:58:21.234538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7096 under_investigation 2026-06-08 06:58:21.218591 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7073 under_investigation 2026-06-08 06:58:21.164966 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6914 under_investigation 2026-06-08 06:58:20.706198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6429 under_investigation 2026-06-08 06:58:19.429831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5962 vulnerable 2026-06-08 06:56:18.086685 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3511 under_investigation 2026-06-08 06:41:53.505241 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3509 under_investigation 2026-06-08 06:41:53.493687 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2374 vulnerable 2026-06-08 06:33:30.953379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2374 under_investigation 2026-06-08 06:33:30.950599 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2321 under_investigation 2026-06-08 06:33:30.858237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1524 vulnerable 2026-06-08 06:27:13.210133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1440 under_investigation 2026-06-08 06:25:40.081590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0391 vulnerable 2026-06-08 06:22:00.527265 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0391 under_investigation 2026-06-08 06:22:00.523974 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6911 under_investigation 2026-06-08 06:21:56.259837 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6838 under_investigation 2026-06-08 06:21:56.014815 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6837 under_investigation 2026-06-08 06:21:56.006859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6836 under_investigation 2026-06-08 06:21:55.990571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.