Wso2 Carbon Scim Common Component
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Wso2 Carbon Scim Common Component.
By the Year
In 2026 there have been 1 vulnerability in Wso2 Carbon Scim Common Component with an average score of 8.2 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 8.20 |
It may take a day or so for new Wso2 Carbon Scim Common Component vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Wso2 Carbon Scim Common Component Security Vulnerabilities
SCIM Auth Bypass in WSO2 Identity Server Federated User Spoofing
CVE-2025-10149
8.2 - High
- October 19, 2026
The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and a federated user share the same username, allowing a federated user to perform actions intended for a local user, including arbitrary operations. A malicious actor authenticated as a federated user may perform arbitrary operations on local user accounts via the SCIM 2.0 or SCIM 1.1 endpoints when local and federated users share the same username. This could lead to user account takeover. Deployments that do not support user self-registration are considered medium severity.
Improper Preservation of Permissions
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Wso2 Carbon Scim Common Component or by Wso2? Click the Watch button to subscribe.
