wso2
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 171 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 16, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Sensitive Data Exposure via URL Parameters in Multiple WSO2 Products Allows Confidential Information Leakage
Improper Token Revocation in WSO2 Identity Server Allows Unauthorized Access
Username Enumeration via External User Stores in Multiple WSO2 Products Allows User Account Discovery
Incomplete reCaptcha Implementation in Authentication Flows in WSO2 Identity Server Allows Brute Force Attacks
Open Redirection via Callback URL in WSO2 API Manager Allows Phishing Attacks
Cross-Site Scripting via Authentication Endpoint in Multiple WSO2 Products Enables UI Manipulation and Redirection
Password Brute Force via Password History Validation in Multiple WSO2 Products Allows User Account Discovery
Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations
Improper Token Revocation via Session-Bound Token Flow in Multiple WSO2 Products Allows Unauthorized Access After Session Termination
Username Enumeration via Authentication Endpoint in WSO2 Identity Server Allows User Account Discovery
Monitor wso2 in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.