Identity Governance

Source repositories

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2024-4412	Wso2 Extensions Identity Governance	Low	0.11	2.7	—		Oct 19, 2026	The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language (EL) code. This can lead to the execution of arbitrary operations within the affected deployment. Exploitation of this vulnerability requires…

CVE-2024-4412LowOct 19, 2026
Wso2 Extensions
Identity Governance
risk 0.11cvss 2.7epss —
The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language (EL) code. This can lead to the execution of arbitrary operations within the affected deployment. Exploitation of this vulnerability requires…