Known Vulnerabilities for Identity Server by WSO2
Listed below are 10 of the newest known vulnerabilities associated with "Identity Server" by "WSO2".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-88018 json | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1... | Not Provided | 2026-09-10 | 2026-09-10 |
| CVE-2026-82180 json | In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, Ce... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-81029 json | OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it. SamlLoginServl... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-78254 json | The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths th... | Not Provided | 2026-09-07 | 2026-09-08 |
| CVE-2026-77776 json | Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header. The header is read directly at seve... | Not Provided | 2026-08-21 | 2026-08-21 |
| CVE-2026-77002 json | The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is... | Not Provided | 2026-08-22 | 2026-08-23 |
| CVE-2026-76560 json | A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's e... | Not Provided | 2026-09-07 | 2026-09-08 |
| CVE-2026-76316 json | In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.9, and 9.4.14, an unauthenticated user who can reach the Splunk mana... | Not Provided | 2026-08-19 | 2026-08-27 |
| CVE-2026-73644 json | OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.2, the SASL PLAIN authorization identity path in opendj-server-... | Not Provided | 2026-08-13 | 2026-08-18 |
| CVE-2026-73304 json | Budibase is an open-source low-code platform. Prior to 3.39.25, GET /api/users/metadata and GET /api/users/metadata/:id retur... | Not Provided | 2026-08-13 | 2026-08-14 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Wso2 | Identity Server | 5.9.0 | |||
| Application | Wso2 | Identity Server | 5.8.0 | |||
| Application | Wso2 | Identity Server | 5.7.0 | |||
| Application | Wso2 | Identity Server | 5.6.0 | |||
| Application | Wso2 | Identity Server | 5.5.0 | |||
| Application | Wso2 | Identity Server | 5.4.1 | |||
| Application | Wso2 | Identity Server | 5.4.0 | |||
| Application | Wso2 | Identity Server | 5.3.0 | |||
| Application | Wso2 | Identity Server | 5.2.0 | |||
| Application | Wso2 | Identity Server | 5.10.0 | |||
| Application | Wso2 | Identity Server | 5.1.0 | |||
| Application | Wso2 | Identity Server | 5.0.0 | |||
| Application | Wso2 | Identity Server | 4.6.0 | |||
| Application | Wso2 | Identity Server | 4.5.0 | |||
| Application | Wso2 | Identity Server | 4.1.0 | |||
| Application | Wso2 | Identity Server | 4.0.0 | |||
| Application | Wso2 | Identity Server | 3.2.3 | |||
| Application | Wso2 | Identity Server | 3.2.2 | |||
| Application | Wso2 | Identity Server | 3.2.0 | |||
| Application | Wso2 | Identity Server | 3.0.1 |