WSO2 Open Banking IAM

2 known vulnerabilities in WSO2 Open Banking IAM, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2025-5802 CVSS 5.3 medium The self-registration flow accepts user-supplied input for usernames without adequately preventing the disclosure of username existence…
  • CVE-2025-12737 CVSS 8.4 high The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a…