Skip to content
OpenAdvisories

Product · WSO2

Identity Server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.4
    CVE-2025-12107

    Server-Side Template Injection via Velocity Template Engine in Multiple WSO2 Products Allows Remote Code Execution

    The Velocity template engine, utilized by the affected product, accepts and processes template syntax without sufficient sanitization or validation of user-controlled input. This allows an authenticated administrator to inject arbitrary template syntax. Succe…

    WSO2 Identity Server