CVE-2024-5139 | WSO2 API Manager Authentication Endpoint cross site scripting

October 21, 2026 Yanac

A vulnerability was found in WSO2 API Manager, Carbon User Management UI, Enterprise Integrator, Identity Server, Identity Server as Key Manager, Open Banking AM and Open Banking IAM. It has been declared as problematic. Affected is an unknown function of the component Authentication Endpoint. Such manipulation leads to cross site scripting.

This vulnerability is listed as CVE-2024-5139. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More