Product by WSO2

    Identity Server Analytics

    11 known vulnerabilities in Identity Server Analytics (WSO2), 1 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    1

    Actively exploited (KEV)

    1

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Identity Server Analytics (WSO2)
    CriticalCVE-2022-29464

    WSO2 Multiple Products Unrestrictive Upload of File Vulnerability

    In CISA KEVRansomwarealso in 7 other products

    		9.8
    MediumCVE-2020-17453

    WSO2 Identity Server as Key Manager: Cross-Site Scripting (XSS)

    also in 7 other products

    		6.1
    MediumCVE-2022-29548

    WSO2 API Manager: Cross-Site Scripting (XSS)

    also in 8 other products

    		4.6
    HighCVE-2020-24705

    WSO2 API Manager: security vulnerability

    also in 5 other products

    		8.8
    HighCVE-2020-24703

    WSO2 Identity Server: security vulnerability

    also in 8 other products

    		8.8
    CriticalCVE-2025-9804

    WSO2 API Manager: Improper Access Control

    also in 24 other products

    		9.6
    HighCVE-2020-12719

    WSO2 API Manager: XML External Entity (XXE)

    also in 6 other products

    		8.7
    MediumCVE-2020-24591

    WSO2 API Manager Analytics: XML External Entity (XXE)

    also in 4 other products

    		6.5
    MediumCVE-2020-24706

    WSO2 API Manager: Cross-Site Scripting (XSS)

    also in 5 other products

    		6.1
    MediumCVE-2020-24704

    WSO2 Identity Server: Cross-Site Scripting (XSS)

    also in 8 other products

    		6.1
    MediumCVE-2023-6911

    WSO2 API Manager: Cross-site Scripting

    also in 11 other products

    		4.8

    All products by WSO2