Wso2 Carbon User Manager Kernel
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Wso2 Carbon User Manager Kernel.
By the Year
In 2026 there have been 2 vulnerabilities in Wso2 Carbon User Manager Kernel with an average score of 4.8 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 2 | 4.80 |
It may take a day or so for new Wso2 Carbon User Manager Kernel vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Wso2 Carbon User Manager Kernel Security Vulnerabilities
WSO2 IS RemoteUserStoreManagerService Password History Bypass Allows Brute-Force
CVE-2024-2323
4.8 - Medium
- October 20, 2026
The RemoteUserStoreManagerService does not sufficiently validate password change attempts when the password history validation feature is enabled. This oversight allows an attacker to repeatedly attempt password guesses for a user account without being adequately restricted. Exploiting this vulnerability enables an attacker to discover a user's password through brute force, leading to account impersonation. The success rate of such an attack is influenced by the complexity of the targeted user's password, with simpler passwords increasing the likelihood of compromise.
Improper Restriction of Excessive Authentication Attempts
WSO2 Identity Server JDBC User Store RCE via Input Validation Bypass
CVE-2024-4457
- October 18, 2026
The Management Console fails to properly validate input related to the configuration of JDBC user stores. This weakness allows an attacker to supply specially crafted input that can lead to the execution of arbitrary code on the affected server. Successful exploitation of this vulnerability enables an attacker to execute arbitrary code on the server with the privileges of the WSO2 product. This could lead to a full compromise of the system.
Shell injection
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Wso2 Carbon User Manager Kernel or by Wso2? Click the Watch button to subscribe.
