Skip to content
OpenAdvisories

Package · Maven

org.wso2.is:identity-server-parent

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.2
    CVE-2024-7096

    Privilege Escalation in Multiple WSO2 Products via SOAP Admin Service Due to Business Logic Flaw

    A privilege escalation vulnerability exists in multiple WSO2 products due to a business logic flaw in SOAP admin services. A malicious actor can create a new user with elevated permissions only when all of the following conditions are met: * SOAP admin servic…

    WSO2 WSO2 API Manager WSO2 Identity Server WSO2 Identity Server as Key Manager Maven
  • Medium 5.6
    CVE-2024-2321

    Incorrect Authorization in Multiple WSO2 Products Allows API Access via Refresh Token

    An incorrect authorization vulnerability exists in multiple WSO2 products, allowing protected APIs to be accessed directly using a refresh token instead of the expected access token. Due to improper authorization checks and token mapping, session cookies are …

    WSO2 WSO2 API Manager WSO2 Identity Server org.wso2.am:am-parent Maven