product of wso2

open banking am

5 thingsrelated by NVD

Severity

critical 1 medium 3 low 1

Being told

Watch: its feed Ask more of it

The feed says each thing that enters, leaves or changes; a reader adds its address, /zetlyn/trackers/cve/things.atom?q=…, to theirs.

Every thing

The Conditional Authentication (Adaptive Authentication) script does not correctly enforce the completion of all required authentication… CVE-2025-15039	Severity critical
When Multi-Attribute Login is enabled, the login interface fails to consistently mask the existence of user accounts. For valid users, the… CVE-2025-13736	Severity low
The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery (CSRF)… CVE-2025-13394	Severity medium
An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal… CVE-2025-9804	Severity medium
The software accepts user-supplied input via a URL parameter without adequate output encoding before reflecting it back to the user's… CVE-2025-8591	Severity medium