Wso2 Carbon Identity User Store Configuration Ui
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Wso2 Carbon Identity User Store Configuration Ui.
By the Year
In 2026 there have been 1 vulnerability in Wso2 Carbon Identity User Store Configuration Ui with an average score of 2.7 out of ten. Last year, in 2025 Wso2 Carbon Identity User Store Configuration Ui had 1 security vulnerability published. At the current rates, it appears that the number of vulnerabilities last year and this year may equal out. Last year, the average CVE base score was greater by 2.50
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 2.70 |
| 2025 | 1 | 5.20 |
It may take a day or so for new Wso2 Carbon Identity User Store Configuration Ui vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Wso2 Carbon Identity User Store Configuration Ui Security Vulnerabilities
WSO2 Identity Server EL Injection via Unvalidated Input
CVE-2024-4412
2.7 - Low
- October 19, 2026
The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language (EL) code. This can lead to the execution of arbitrary operations within the affected deployment. Exploitation of this vulnerability requires administrator privileges. The impact is minimal as EL usage is restricted to certain read operations.
Code Injection
WSO2 Identity Server XSS via JDBC User Store Error Output
CVE-2024-8008
5.2 - Medium
- June 02, 2025
A reflected cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to insufficient output encoding in error messages generated by the JDBC user store connection validation request. A malicious actor can inject a specially crafted payload into the request, causing the browser to execute arbitrary JavaScript in the context of the vulnerable page. This vulnerability may allow UI manipulation, redirection to malicious websites, or data exfiltration from the browser. However, since all session-related sensitive cookies are protected with the httpOnly flag, session hijacking is not possible.
XSS
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Wso2 Carbon Identity User Store Configuration Ui or by Wso2? Click the Watch button to subscribe.
