Wso2 Identity Server vulnerabilities
83 published vulnerabilities in Wso2 Identity Server, 1 of them exploited in the wild. The most were published in 2025 (33), and 2 so far in 2026.
Wso2 Identity Server vulnerabilities by year
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Wso2 Identity Server vulnerabilities
- CVE-2022-29464 WSO2 Multiple Products Unrestrictive Upload of File
- CVE-2025-9312 Improper Certificate-Based Authentication Enforcement in Multiple WSO2 Products
- CVE-2025-10611 Potential Broken Access Control in Multiple WSO2 Products via System REST APIs
- CVE-2024-6914 Incorrect Authorization in Multiple WSO2 Products via Account Recovery SOAP Admin Service Leading to Account Takeover
- CVE-2025-9804 Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs
- CVE-2025-15039 Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products
- CVE-2021-42646 XML external entity in n/a
- CVE-2025-6670 Cross-Site Request Forgery (CSRF) in Multiple WSO2 Products via HTTP GET in Admin Services
- CVE-2020-24703 Open redirect in n/a
- CVE-2020-24705 Cross-site request forgery in n/a
- CVE-2016-4311 Cross-site request forgery in n/a
- CVE-2020-12719 XML external entity in n/a
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.