Skip to main content
← Maven

org.wso2.is:identity-server-parent

2 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 2 medium
Registry
Maven Central

Advisories 2

  • CVE-2024-7096Medium 4.2

    Privilege Escalation in Multiple WSO2 Products via SOAP Admin Service Due to Business Logic Flaw

    Affected: from 5.2.0, fixed in 7.1.0.

  • CVE-2024-2321Medium 5.6

    Incorrect Authorization in Multiple WSO2 Products Allows API Access via Refresh Token

    Affected: from 6.1.0-beta, through 6.1.0; from 6.0.0-alpha3, through 6.0.0; from 5.11.0-alpha, through 5.11.0.