Skip to content
OpenAdvisories

Product · WSO2

WSO2 Identity Server Keystore Rest API Commons

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.8
    CVE-2025-13647

    Information Disclosure in Multiple WSO2 Products Allows Exposure of Certificate File Paths

    The affected component fails to enforce expected validation constraints on the `content-type` header when processing certain requests. This allows an attacker to submit a crafted request with a manipulated `content-type` header. Successful exploitation can le…

    WSO2 WSO2 Identity Server WSO2 Identity Server as Key Manager WSO2 Open Banking IAM