Wso2 Carbon Secured Http Log4j2 Appender
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Wso2 Carbon Secured Http Log4j2 Appender.
By the Year
In 2026 there have been 1 vulnerability in Wso2 Carbon Secured Http Log4j2 Appender with an average score of 4.9 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 4.90 |
It may take a day or so for new Wso2 Carbon Secured Http Log4j2 Appender vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Wso2 Carbon Secured Http Log4j2 Appender Security Vulnerabilities
WSO2 Identity Server: Credential Exposure via PlainText Logs
CVE-2025-7203
4.9 - Medium
- October 19, 2026
The Management Console and product files expose sensitive data, including remote log server credentials, truststore passwords, and keystore passwords, in plain text. This occurs because the system does not sufficiently protect or obscure these credentials when the remote logging feature is enabled. An attacker with administrative access to the Management Console or direct access to product files can retrieve these sensitive credentials. This allows for potential manipulation of log entries and compromise of the integrity and confidentiality of the remote log server.
Cleartext Storage of Sensitive Information
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Wso2 Carbon Secured Http Log4j2 Appender or by Wso2? Click the Watch button to subscribe.
