Wso2 Carbon Identity Application
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Wso2 Carbon Identity Application.
By the Year
In 2026 there have been 1 vulnerability in Wso2 Carbon Identity Application with an average score of 4.0 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 4.00 |
It may take a day or so for new Wso2 Carbon Identity Application vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Wso2 Carbon Identity Application Security Vulnerabilities
WSO2 API Manager Sensitive Data Logged via URL Parameters
CVE-2024-6423
4 - Medium
- October 21, 2026
The product failed to enforce validation constraints on user-supplied input in URL parameters, allowing sensitive data to be passed to flows where it was not intended to be processed. Although the product did not utilize this data, its acceptance could lead to logging. If a user mistakenly sends sensitive data via URL parameters to any flow, this data could be inadvertently logged in access logs. This has the potential to expose confidential information, compromising the security and privacy of affected systems if the product is used incorrectly.
Improper Input Validation
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Wso2 Carbon Identity Application or by Wso2? Click the Watch button to subscribe.
