Known Vulnerabilities for Identity Server by Wso2
Listed below are 10 of the newest known vulnerabilities associated with "Identity Server" by "Wso2".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-121392 json | FreeRDP before 3.32.2 contains an improper certificate validation vulnerability in tls_verify_certificate() that accepts Comm... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-120716 json | Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2026.3.... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-120063 json | When psqlODBC quotes a schema or table name into a 128-byte stack buffer, its length check lets it write up to two bytes past... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-116870 json | In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently. This could result in a tok... | Not Provided | 2026-10-27 | 2026-10-27 |
| CVE-2026-116249 json | In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel identity file relative t... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-116242 json | pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it neither host_pkey_directories nor ssh_config_file, so it a... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-115479 json | baserCMS is a website development framework. In versions 5.2.5 before 5.3.2 and 5.4.0 before 5.4.2, an unauthenticated visito... | Not Provided | 2026-10-23 | 2026-10-30 |
| CVE-2026-115413 json | Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allow loc... | Not Provided | 2026-10-27 | 2026-10-27 |
| CVE-2026-114612 json | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From 1.87.0 until 1.100.4, 1.101.3, 1.1... | Not Provided | 2026-10-22 | 2026-10-30 |
| CVE-2026-114611 json | OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device ma... | Not Provided | 2026-10-22 | 2026-10-29 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Wso2 | Identity Server | 5.9.0 | |||
| Application | Wso2 | Identity Server | 5.8.0 | |||
| Application | Wso2 | Identity Server | 5.7.0 | |||
| Application | Wso2 | Identity Server | 5.6.0 | |||
| Application | Wso2 | Identity Server | 5.5.0 | |||
| Application | Wso2 | Identity Server | 5.4.1 | |||
| Application | Wso2 | Identity Server | 5.4.0 | |||
| Application | Wso2 | Identity Server | 5.3.0 | |||
| Application | Wso2 | Identity Server | 5.2.0 | |||
| Application | Wso2 | Identity Server | 5.10.0 | |||
| Application | Wso2 | Identity Server | 5.1.0 | |||
| Application | Wso2 | Identity Server | 5.0.0 | |||
| Application | Wso2 | Identity Server | 4.6.0 | |||
| Application | Wso2 | Identity Server | 4.5.0 | |||
| Application | Wso2 | Identity Server | 4.1.0 | |||
| Application | Wso2 | Identity Server | 4.0.0 | |||
| Application | Wso2 | Identity Server | 3.2.3 | |||
| Application | Wso2 | Identity Server | 3.2.2 | |||
| Application | Wso2 | Identity Server | 3.2.0 | |||
| Application | Wso2 | Identity Server | 3.0.1 |