CVE-2020-14446

概要

参考情報

• cybersecurityworks.com/zerodays/cve-2020-14446-wso2.html · Exploit
• docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0713 · Vendor Advisory

identity server のその他の脆弱性

• CVE-2025-12737高 8.4The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a mal…
• CVE-2026-0637中 4.4When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties. This logging oc…
• CVE-2025-15039緊急 9.4The Conditional Authentication (Adaptive Authentication) script does not correctly enforce the completion of all required authentication ste…
• CVE-2025-14779低 3.8The Secret Type Management REST API does not correctly isolate access controls when deleting a secret type. The on-delete cascade logic, whe…
• CVE-2025-13909中 4.3The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic…