CVE-2025-10149 | WSO2 Identity Server as Key Manager Scim Endpoint improper authorization

October 19, 2026 Yanac

A vulnerability, which was classified as critical, was found in WSO2 Identity Server as Key Manager, Open Banking IAM, Identity Server, Carbon SCIM Common Component and Carbon SCIM 2.0 Common Component. This affects an unknown function of the component Scim Endpoint. Executing a manipulation can lead to improper authorization.

This vulnerability is tracked as CVE-2025-10149. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More