Skip to content
OpenAdvisories

Product · WSO2

WSO2 Identity Application Management Component

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2025-11229

    Privilege Escalation via Client Credentials Grant Type in WSO2 Identity Server

    The system fails to properly enforce scope authorization when the `authorize_all_scopes` configuration is enabled. This allows applications using the client credentials grant type to obtain all API scopes, including sensitive internal and console scopes, with…

    WSO2 WSO2 Identity Server WSO2 Identity Application Management Component