Wso2 Carbon Identity Core
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Wso2 Carbon Identity Core.
By the Year
In 2026 there have been 1 vulnerability in Wso2 Carbon Identity Core with an average score of 4.0 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 4.00 |
It may take a day or so for new Wso2 Carbon Identity Core vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Wso2 Carbon Identity Core Security Vulnerabilities
WSO2 API Manager Sensitive Data Logged via URL Parameters
CVE-2024-6423
4 - Medium
- October 21, 2026
The product failed to enforce validation constraints on user-supplied input in URL parameters, allowing sensitive data to be passed to flows where it was not intended to be processed. Although the product did not utilize this data, its acceptance could lead to logging. If a user mistakenly sends sensitive data via URL parameters to any flow, this data could be inadvertently logged in access logs. This has the potential to expose confidential information, compromising the security and privacy of affected systems if the product is used incorrectly.
Improper Input Validation
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Wso2 Carbon Identity Core or by Wso2? Click the Watch button to subscribe.
