Skip to content
OpenAdvisories

Product · WSO2

Forgerock Key Manager Component

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2025-7043

    Refresh Token Misuse via Validation Flaw in Multiple WSO2 Products Enables Unauthorized Resource Consumption

    The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be treated as a valid access token, enabling its use for consuming protected resources. This bypasses the intended security control that requires valid client cred…

    WSO2 WSO2 API Manager WSO2 API Control Plane WSO2 Universal Gateway