Wso2 Identity Server as Key Manager vulnerabilities
52 published vulnerabilities in Wso2 Identity Server as Key Manager, 1 of them exploited in the wild. The most were published in 2025 (18), and 1 so far in 2026.
Wso2 Identity Server as Key Manager vulnerabilities by year
2018
2020
2021
2022
2023
2024
2025
2026
Most exploited Wso2 Identity Server as Key Manager vulnerabilities
- CVE-2022-29464 WSO2 Multiple Products Unrestrictive Upload of File
- CVE-2025-9312 Improper Certificate-Based Authentication Enforcement in Multiple WSO2 Products
- CVE-2025-10611 Potential Broken Access Control in Multiple WSO2 Products via System REST APIs
- CVE-2024-6914 Incorrect Authorization in Multiple WSO2 Products via Account Recovery SOAP Admin Service Leading to Account Takeover
- CVE-2025-9804 Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs
- CVE-2025-15039 Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products
- CVE-2021-42646 XML external entity in n/a
- CVE-2025-6670 Cross-Site Request Forgery (CSRF) in Multiple WSO2 Products via HTTP GET in Admin Services
- CVE-2020-24703 Open redirect in n/a
- CVE-2020-24705 Cross-site request forgery in n/a
- CVE-2020-12719 XML external entity in n/a
- CVE-2023-6837 Multiple WSO2 products vulnerable to perform user impersonatoin using JIT provisioning
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.